ეს ძველი ვერსიაა. უახლესი ვერსია: 2.2.1.6. LibreCAD 2.2.1.6 · გამოშვების თარიღი:
საინსტალაციო ფაილები 2.2.0.1
| არქიტექტურა | ტიპი | მოქმედების არე | ფაილის ზომა | ჩამოტვირთვა | SHA256 |
|---|---|---|---|---|---|
| 32-ბიტიანი | EXE (NSIS) · en-US | ყველა მომხმარებელი | — | github.com | VirusTotal |
ბმული და SHA256 აღებულია Windows Package Manager-ის საზოგადოების მანიფესტიდან. ფაილის გაშვებამდე შეადარეთ ჰეში.
ცვლილებების აღწერა
Bugfix release 2.2.0.1
This is a bugfix release for official stable release 2.2.0.
It fixes a minor vulnerability (CVE-2023-30259) with a mature shapelib contained in our codebase.
The vulnerability addresses only the plugin Importshp, which is used to import shape files (SHP/SHX/DBF).
Shape files are used in surveying and so do not affect the most users.
As this is probably not a widely used plugin, the fix was just to remove the plugin.
If you are a surveyor and need the shape file support, it is safe to stay with 2.2.0 version, as long as you know the origin of the used shape files.
The vulnerability is an out-of-bounds read, what means, if a malformed shape file is imported, the application can crash.
With some efforts an attacker possibly can create a shape file, which can lead to unintended code execution and seize your computer.
But this is a worst case scenario, which I would rate as extremely low to occur.
MD5 sums:
059e5fff8d19b4ff729ea8d07656209c LibreCAD-2.2.0.1-x86_64.AppImage
33b0675ea52c77f2f1f6c8861677414d LibreCAD-2.2.0.1.dmg
5aaa9f6b237fdfd42a4095058584dbcb LibreCAD-Installer-2.2.0.1.exe
SHA256 hashes:
278967ae89398e07321ff4bd430e9cfbff4b9d17b887113d08fb51c8f2def2e7 LibreCAD-2.2.0.1-x86_64.AppImage
23b47914440c99d6d0371e67d31f5bb328ad8f6966d7ed564820cb7a71a3b350 LibreCAD-2.2.0.1.dmg
f1520db7a6ef13928780d42cb2dc6dd74c88f7f6c39a7774efc83b79d52abd5d LibreCAD-Installer-2.2.0.1.exe
