-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Apr 2023 20:48:00 +0000 Source: pev Binary: pev pev-dbgsym Architecture: s390x Version: 0.81-3+deb11u1 Distribution: bullseye Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: David da Silva Polverari Description: pev - text-based tool to analyze PE files Closes: 1034725 Changes: pev (0.81-3+deb11u1) bullseye; urgency=medium . * debian/patches/0002-fix-bo-pe_exports.patch: created to fix a buffer overflow vulnerability present on libpe's pe_exports function from exports.c (CVE-2021-45423). Without this patch, a maliciously-crafted PE file opened by pev utilities can trigger arbitrary code execution. (Closes: #1034725) Checksums-Sha1: 83c73c7370ad2fc43248d80b06f47e0b34c7e3e5 400408 pev-dbgsym_0.81-3+deb11u1_s390x.deb eacb0705d9a78a2705c50c69446f302d38445976 5937 pev_0.81-3+deb11u1_s390x-buildd.buildinfo b06400c4d0bda7e570563caabb9c3ff2570bb21c 171972 pev_0.81-3+deb11u1_s390x.deb Checksums-Sha256: 668dd4746784c39b0d8267976502ad9f68344f8df3f15f7b360b9843133813fa 400408 pev-dbgsym_0.81-3+deb11u1_s390x.deb e9e93f7349781143470ed21fecf033c90d959720e052b30fe701729932861d50 5937 pev_0.81-3+deb11u1_s390x-buildd.buildinfo 0404931af234829571efe102802d985a6acb7bdd50420eb1a128b5a6309b57c1 171972 pev_0.81-3+deb11u1_s390x.deb Files: 260ef23599dc5a24da350c4e8eb786a4 400408 debug optional pev-dbgsym_0.81-3+deb11u1_s390x.deb 7a195d02d7d3c7bd4ed205782f48c8e2 5937 utils optional pev_0.81-3+deb11u1_s390x-buildd.buildinfo 2e0c2f1aa1af0a00d4f91b35bd011659 171972 utils optional pev_0.81-3+deb11u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKrZTN06npYMYIgrtXmwDt3BKCdIFAmROfHIACgkQXmwDt3BK CdI3gRAAuLPahx0+PQHdT6OMyuXeMzyQjuMJSKJ8qo0m8olq9XmdDhAEtYEAfgD0 AJQ7kQc4VO6dVUW/GpxWbVFSekjv+82l5OzGlHMNDjn2e67812Z2pjmDImCF7ENi GOt4XrZbTij3d27mD9TkDJtl14rb0MAR/2JqoN6hByO7DOuAlIk0nCpjHlujYCpW O434B8+jv6UgBlG7M9mc9vyDmgKye2dxaQ7RxrNwhKszPeBdEOphw5h98kFYtT/E MgzR3h38jwvDIPJJEgh8jWnDNbAzSeFVUWVhUmL/9diNFFjpxp0vJA9foL79tjCe 6w+0AL2XcXRauplowoqCwiME/3uNK/RpX7N1799QRnwPyQx+Tjyh7XquU78u0ucQ EsZwoAhhROfMNP+WkK7pPr4NAC5ZTf4CoB4NB3S0tp62X+WnkKGEAM3Su8ukdYfr Z6IN5KsNfBpJM8/DgxdUM01+Nmpy8SMolZmQzVVmBegH71twpRfI8fdLU7DdJsQA 8oH4Cpl6ccD1zLv/zqKNgqioROuVjA48jDWF/WZLU3GKmOZKuw5jsC2YTh3holMY 3CuIeoFVIsLZp7/fvJJAGbSAbIgs6FSSx0mGu4HAMeXZtEJLuJFR4zZk3yWcHi9C CFrDOUVb0o9+eCQrU4TR7lhmXDfO9u5/sf/e0hUgjq8YCwB0nlM= =m+RL -----END PGP SIGNATURE-----