[Pkg-electronics-devel] CVE-2021-40391 fixed in gerbv 2.7.1

[Violet Land]

Thanks to the excellent work of the Cisco Talos Team [1], we were notified of CVE-2021-40391 [2].
 
The fix to this issue was backported to gerbv 2.7.x as release 2.7.1 [3].
 
Please do not hesitate to contact us (preferred via GitHub issues [4]) if you have any trouble including this fix in Debian. Moreover we are close to releasing 2.8.0 which will fix a number of additional issues [5]
 
 
 
[1]  https://talosintelligence.com/
[2]  https://talosintelligence.com/vulnerability_reports/TALOS-2021-1402
[3]  https://github.com/gerbv/gerbv/releases/tag/gerbv-2-7-1-RELEASE
[4]  https://github.com/gerbv/gerbv/issues
[5]  https://github.com/gerbv/gerbv/releases/tag/gerbv-2-8-0-RC-1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-electronics-devel/attachments/20211104/116a3631/attachment.htm>