http://bugzilla.opensuse.org/show_bug.cgi?id=1192936 http://bugzilla.opensuse.org/show_bug.cgi?id=1192936#c2 Jan Engelhardt <jengelh@inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jengelh@inai.de |jslaby@suse.com Summary|VUL-0: CVE-2021-21898: |VUL-0: CVE-2021-21898: |librecad: out-of-bounds |libdxfrw: out-of-bounds |write in |write in |dwgCompressor:decompress18( |dwgCompressor:decompress18( |) |) --- Comment #2 from Jan Engelhardt <jengelh@inai.de> --- librecad does not use the bundled libdxfrw, we even have a rm -Rf line in the build recipe to make sure that is the case. Reassigning to libdxfrw. -- You are receiving this mail because: You are on the CC list for the bug.