Format: 1.8
Date: Tue, 23 Apr 2024 15:37:14 -0700
Source: gerbv
Architecture: source
Version: 2.7.0-1ubuntu0.2
Distribution: focal-security
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Changed-By: Chris Kim <chris.kim@canonical.com>
Changes:
 gerbv (2.7.0-1ubuntu0.2) focal-security; urgency=medium
 .
   * SECURITY UPDATE: Specially crafted input files can cause Gerbv to crash.
     - debian/patches/0003-fix-Out-of-bounds-memory-access-of-filename.patch:
       Fixes out-of-bounds memory access of filename.
     - CVE-2023-4508
Checksums-Sha1:
 f9502b77cee9899b49e9fa729baa3385fe4fdf41 2128 gerbv_2.7.0-1ubuntu0.2.dsc
 7a3c924e6fdabd7d730de4c6387d30a553ad4e0c 13900 gerbv_2.7.0-1ubuntu0.2.debian.tar.xz
 fd303699e6a756cfe1ec1b986aab03c47723b103 12212 gerbv_2.7.0-1ubuntu0.2_source.buildinfo
Checksums-Sha256:
 950d080d92cbd82459a7abf3f7c8e86c267e27ce3586634fd2df6970441d77d5 2128 gerbv_2.7.0-1ubuntu0.2.dsc
 2a4fafc8a756fa23152ba07bc31bc26b746d21b4ad789fbc0cad34237f13a5de 13900 gerbv_2.7.0-1ubuntu0.2.debian.tar.xz
 786159f9ee859a2bd2efd91fe9460e47fc8485a2fa887f7c2654768115e65402 12212 gerbv_2.7.0-1ubuntu0.2_source.buildinfo
Files:
 220edc0f272574eab03621d1ebae3675 2128 electronics optional gerbv_2.7.0-1ubuntu0.2.dsc
 4d4e18016ff6f3e21d8836d905946207 13900 electronics optional gerbv_2.7.0-1ubuntu0.2.debian.tar.xz
 b668be01f20a93cff211bffcb06b3606 12212 electronics optional gerbv_2.7.0-1ubuntu0.2_source.buildinfo
Original-Maintainer: Debian Electronics Team <pkg-electronics-devel@alioth-lists.debian.net>