Security risk

[AdM]

I got the following message from IT regarding the use of CloudCompare at work:
The analyzed packages contain several outdated third-party libraries, including zlib, OpenSSL, as well as additional components used for processing geospatial, image, and file formats.
The analysis identified indications of known vulnerabilities in integrated third-party components that do not appear to have been sufficiently remediated.
Of particular concern is CVE-2021-21897 affecting the integrated dxflib component. This vulnerability is related to the processing of specially crafted DXF files and may lead to memory corruption as well as potential arbitrary code execution.

Looks like I might lose CloudCompare short notice without an alternative.

[daniel]

Your IT department has send us the same message.

We have updated dxflib in the latest 2.14.beta version. There are aware of this, but I don't know if this is sufficient for them for now.