-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Apr 2023 20:48:00 +0000 Source: pev Binary: pev pev-dbgsym Architecture: arm64 Version: 0.81-3+deb11u1 Distribution: bullseye Urgency: medium Maintainer: arm Build Daemon (arm-arm-03) Changed-By: David da Silva Polverari Description: pev - text-based tool to analyze PE files Closes: 1034725 Changes: pev (0.81-3+deb11u1) bullseye; urgency=medium . * debian/patches/0002-fix-bo-pe_exports.patch: created to fix a buffer overflow vulnerability present on libpe's pe_exports function from exports.c (CVE-2021-45423). Without this patch, a maliciously-crafted PE file opened by pev utilities can trigger arbitrary code execution. (Closes: #1034725) Checksums-Sha1: 0a982dffea8b3789eeba808903ab93c279d22346 400924 pev-dbgsym_0.81-3+deb11u1_arm64.deb 679128314123acf54f8a98befc3bc27f2a4f365f 5971 pev_0.81-3+deb11u1_arm64-buildd.buildinfo 6217b3b2232ae35457c8b37a46417540c88fc6cf 169228 pev_0.81-3+deb11u1_arm64.deb Checksums-Sha256: cbf884b1f985bf54c83750e21ff7ea5ef6ea0eb48a49ff989300bd3ca6f44edf 400924 pev-dbgsym_0.81-3+deb11u1_arm64.deb ee2dfc160706926d47012e57025d57751b22c4fb169fd316dbc147f242e3d45f 5971 pev_0.81-3+deb11u1_arm64-buildd.buildinfo 03e80ac3475c12a6b01969b3ab0c67e957e24683e4ad41e72fa0aa89e1602323 169228 pev_0.81-3+deb11u1_arm64.deb Files: cb32fb8ca10171f2af31f8d91d2357bf 400924 debug optional pev-dbgsym_0.81-3+deb11u1_arm64.deb d62e0dd2bfc3dd5b3db8b723e9041bbb 5971 utils optional pev_0.81-3+deb11u1_arm64-buildd.buildinfo d50dac7f7d51f9ae85b18e7679f834b3 169228 utils optional pev_0.81-3+deb11u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEqO6ffWSdcdkiR5vYVp++5mqGGP0FAmROfPUACgkQVp++5mqG GP24gg//STF0874ZkHt0IXZ1/dz3cm2BA7bne+vtsjh++fbgk1f4DfhXgkgQhJr6 JNcLQXXf346fkLGB1zENMTI4qPtuRbjzMWOkReT/K2xvbPh/UsVPOJTxb2H8Hj0k /G5If7DS7fwFT2C7XReYVoW93FhhQaTiMl1oq/mf3MrX528CUeoeCd1Xt7yldMkV ToiIaRBnpMWU+1/nrYkyVI79x0XBB60sfh9JHc+twxOz2bdVw5w4I1RWkK9NCj4/ s8CdexY4eHV0aQv/ZvCTWTu7kMj5fty52DEZCv2IIR17nTu+T8k3J6ARyPQGp9Uj ejqDOs/TIdDcHqMmPYghteUEoTNTxdFpb2zUJYrm1H6WVPSrgg7ruAlCrQnQwR8X N4pf7OZHjyoG08vV23Fc/lJbSVHPYVLJSg2eLCQn0eWQ8/CY6dc+I7+5a46M5c9L OHJMld30iRaaAYSLUNRTqY+jvO7uG7G7LW+/xXb1FAKhJtT40umfVc2t8j8RbCPd 8KrRG9lv0WKaed60nSouGqvaV5/icalluF4fm/dda3TRNqsLrCCv5A3p6bdYwsFW +FHoVireQVG1f8bLSXx1zuBtljqwFjvIpn9Y2b7/AtO1iyPIx4vMqiV7S1sUMW2C DUL/XJ+caTX2fOz1aiJEmQne09oXRiEp3UkSUUPztK+62u8gZFg= =LhWU -----END PGP SIGNATURE-----