Gerbv could be made to crash if it opened a specially crafted input file.
Software Description:
- - gerbv: Gerber file viewer for PCB design
Details:
George-Andrei Iosif and David Fernandez Gonzalez discovered that Gerbv did
not properly initialize a data structure when parsing certain nested
RS-274X format files. If a user were tricked into opening a specially
crafted file, an attacker could possibly use this issue to cause a denial
of service (application crash).
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.10
gerbv 2.9.8-1ubuntu0.1
Ubuntu 22.04 LTS
gerbv 2.8.2-1ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 20.04 LTS
gerbv 2.7.0-1ubuntu0.2
Ubuntu 18.04 LTS
gerbv 2.6.1-3ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 16.04 LTS
gerbv 2.6.0-1ubuntu0.16.04.1~esm2
Available with Ubuntu Pro
Ubuntu 14.04 LTS
gerbv 2.6.0-1ubuntu0.14.04.1~esm2
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.https://ubuntu.com/security/notices/USN-6760-1
CVE-2023-4508
Get the latest Linux and open source security news straight to your inbox.