[Debian-med-packaging] Bug#996591: libgclib: CVE-2021-42006

[Salvatore Bonaccorso]

Source: libgclib
Version: 0.12.7+ds-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/gpertea/gclib/issues/11
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerability was published for libgclib.

CVE-2021-42006[0]:
| An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7
| allows an attacker to cause a segmentation fault or possibly have
| unspecified other impact via a crafted GFF file.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-42006
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42006
[1] https://github.com/gpertea/gclib/issues/11

Regards,
Salvatore