LibreDWG - News: libredwg-0.10.1 released

libredwg-0.10.1 released

Item posted by Reini Urban <reini_urban> on Mon 13 Jan 2020 09:40:00 AM UTC.

Major bugfixes:
  * Fixed dwg2SVG htmlescape overflows and off-by-ones (#182)
  * Removed direct usages of fprintf and stderr in the lib. All can be
    redefined now. (#181)

Minor bugfixes:
  * Fuzzing fixes for dwg2SVG, dwgread. (#182)
  * Fixed eed.raw leaks

Here are the compressed sources:

  http://ftp.gnu.org/gnu/libredwg/libredwg-0.10.1.tar.gz   (10.9MB)
  http://ftp.gnu.org/gnu/libredwg/libredwg-0.10.1.tar.xz   (4.5MB)

Here are the GPG detached signatures[*]:

  http://ftp.gnu.org/gnu/libredwg/libredwg-0.10.1.tar.gz.sig
  http://ftp.gnu.org/gnu/libredwg/libredwg-0.10.1.tar.xz.sig

Use a mirror for higher download bandwidth:

  https://www.gnu.org/order/ftp.html

Here are more binaries:

  https://github.com/LibreDWG/libredwg/releases/tag/0.10.1

Here are the SHA256 checksums:

6539a9a762f74e937f08000e2bb3d3d4dddd326b85b5361f7532237b68ff0ae3  libredwg-0.10.1.tar.gz
0fa603d5f836dfceb8ae4aac28d1e836c09dce3936ab98703bb2341126678ec3  libredwg-0.10.1.tar.xz

[*] Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify libredwg-0.10.1.tar.gz.sig

If that command fails because you don't have the required public key,
then run this command to import it:

  gpg --keyserver keys.gnupg.net --recv-keys B4F63339E65D6414

and rerun the 'gpg --verify' command.