Change log for gerbv package in Ubuntu

gerbv (2.9.8-1ubuntu0.1) mantic-security; urgency=medium

  * SECURITY UPDATE: Specially crafted input files can cause Gerbv to crash.
    - debian/patches/0003-fix-Out-of-bounds-memory-access-of-filename.patch:
      Fixes out-of-bounds memory access of filename.
    - CVE-2023-4508

 -- Chris Kim <email address hidden>  Tue, 23 Apr 2024 09:15:46 -0700

Available diffs

• diff from 2.9.8-1 (in Debian) to 2.9.8-1ubuntu0.1 (1.7 KiB)

gerbv (2.7.0-1ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Specially crafted input files can cause Gerbv to crash.
    - debian/patches/0003-fix-Out-of-bounds-memory-access-of-filename.patch:
      Fixes out-of-bounds memory access of filename.
    - CVE-2023-4508

 -- Chris Kim <email address hidden>  Tue, 23 Apr 2024 15:37:14 -0700

Available diffs

• diff from 2.7.0-1ubuntu0.1 to 2.7.0-1ubuntu0.2 (1.6 KiB)

gerbv (2.10.0-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 05:41:44 +0000

Available diffs

• diff from 2.10.0-1build1 to 2.10.0-1build2 (305 bytes)

gerbv (2.10.0-1build1) noble; urgency=medium

  * No-change rebuild against libglib2.0-0t64

 -- Steve Langasek <email address hidden>  Fri, 08 Mar 2024 04:29:10 +0000

Available diffs

• diff from 2.10.0-1 (in Debian) to 2.10.0-1build1 (549 bytes)

gerbv (2.10.0-1) unstable; urgency=medium

  * [8476beb] New upstream version 2.10.0
    Fixes CVE-2023-4508
    (Closes: 1050560)
  * [237f3cf] d/rules: Add target override_dh_auto_clean
    (Closes: #1044912)

 -- Carsten Schoenert <email address hidden>  Sat, 26 Aug 2023 22:01:54 +0530

Available diffs

• diff from 2.9.8-1 to 2.10.0-1 (24.2 KiB)

gerbv (2.7.0-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write when processing T code
    - debian/patches/CVE-2021-40391.patch: Returns -1 when encountering an
      invalid tool number in src/drill.c.
    - CVE-2021-40391
  * SECURITY UPDATE: arbitrary write when parsing RS-274X opcodes
    - debian/patches/CVE-2021-40393.patch: Adds verifications for addresses
      used when pushing and popping from memory in src/gerber.c.
    - CVE-2021-40393
  * SECURITY UPDATE: integer overflow when processing RS-274X files
    - debian/patches/CVE-2021-40394.patch: Checks if the input parameters
      can produce an integer overflow in src/gerber.c.
    - CVE-2021-40394
  * SECURITY UPDATE: out-of-bounds read when processing RS-274X files
    - debian/patches/CVE-2021-40400.patch: Limits the read location to the
      intentionally readable memory in src/gerber.c.
    - CVE-2021-40400
  * SECURITY UPDATE: use after free when processing RS-274X definitions
    - debian/patches/CVE-2021-40401.patch: Checks a function parsing
      strings to not return NULL in src/gerber.c.
    - CVE-2021-40401
  * SECURITY UPDATE: out-of-bounds read when parsing pick-and-place files
    - debian/patches/CVE-2021-40403.patch: Checks the return code of a
      sscanf call in src/pick-and-place.c.
    - CVE-2021-40403

 -- George-Andrei Iosif <email address hidden>  Wed, 05 Jul 2023 17:10:48 +0300

Available diffs

• diff from 2.7.0-1 (in Debian) to 2.7.0-1ubuntu0.1 (4.4 KiB)

gerbv (2.9.8-1) unstable; urgency=medium

  * [8864c8a] New upstream version 2.9.8

 -- Carsten Schoenert <email address hidden>  Thu, 29 Jun 2023 20:12:47 +0200

Available diffs

• diff from 2.9.6-1 to 2.9.8-1 (3.8 KiB)

gerbv (2.9.6-1) unstable; urgency=medium

  * [d27dd89] New upstream version 2.9.6
  * [f6085ac] d/control: Update Standards-Version to 4.6.2
    No further changes needed.

 -- Carsten Schoenert <email address hidden>  Sat, 07 Jan 2023 09:22:51 +0100

Available diffs

• diff from 2.9.5-1 to 2.9.6-1 (1.4 KiB)

gerbv (2.9.5-1) unstable; urgency=medium

  * [6f7b797] New upstream version 2.9.5

 -- Carsten Schoenert <email address hidden>  Sun, 27 Nov 2022 09:44:27 +0100

Available diffs

• diff from 2.9.4-1 to 2.9.5-1 (2.2 KiB)

gerbv (2.9.4-1) unstable; urgency=medium

  * [91ab0cb] New upstream version 2.9.4
  * [47c157c] Lintian: Adjust overrides for gerbv package

 -- Carsten Schoenert <email address hidden>  Sun, 06 Nov 2022 07:57:29 +0100

Available diffs

• diff from 2.9.2-1 to 2.9.4-1 (6.2 KiB)
• diff from 2.9.3-1 to 2.9.4-1 (1.9 KiB)

gerbv (2.9.3-1) unstable; urgency=medium

  * [32341ea] New upstream version 2.9.3
  * [6680189] Lintian: Adjust overrides for gerbv package

 -- Carsten Schoenert <email address hidden>  Sat, 08 Oct 2022 16:55:08 +0200

gerbv (2.9.2-1) unstable; urgency=medium

  * [ee03caf] New upstream version 2.9.2
    Fixes CVE-2021-40400, CVE-2021-40401, CVE-2021-40403
  * [b080d0b] d/control: Update Standards-Version to 4.6.1
    No further changes needed.
  * [c736be5] d/copyright: Update year data

 -- Carsten Schoenert <email address hidden>  Sun, 19 Jun 2022 14:38:22 +0200

Available diffs

• diff from 2.8.2-1 to 2.9.2-1 (30.6 KiB)

gerbv (2.8.2-1) unstable; urgency=medium

  * [68fb3b5] New upstream version 2.8.2
  * [ddaea51] Drop patch queue
    Dropped patch (applied upstream):
    fixes/Adjust-autotool-related-files-due-warnings-by-autoconf.patch
  * [59dba71] d/copyright: Rewrite to use DEP-5 style

 -- Carsten Schoenert <email address hidden>  Fri, 24 Dec 2021 11:38:55 +0100

Available diffs

• diff from 2.8.1-1 to 2.8.2-1 (6.5 KiB)

gerbv (2.8.1-1) unstable; urgency=medium

  * [0a4db9d] New upstream version 2.8.1
    (Closes: #727692)
  * [3c66364] Rebuild patch queue from patch-queue branch
    Added patch:
    fixes/Adjust-autotool-related-files-due-warnings-by-autoconf.patch
    Dropped patches (applied upstream):
    debian-hacks/crossbuild-use-PKG_PROG_PKG_CONFIG-instead-of-AC_PATH_PRO.patch
    debian-hacks/gerbv.desktop-Add-Keywords-entry.patch
    debian-hacks/gerbv.desktop-Add-main-category-to-desktop-file.patch
    debian-hacks/gerbv.desktop-Remove-encoding-key.patch
    fixes/man-page-correct-groff-syntax-for-escaping-of-hyphens.patch
    fixes/man-page-fix-misspelled-excercise-exercise.patch
    fixes/spelling-Correct-misspelled-word-Ignorning.patch
    fixes/spelling-Correct-misspelled-word-seperatly.patch

 -- Carsten Schoenert <email address hidden>  Sat, 27 Nov 2021 09:44:08 +0100

Available diffs

• diff from 2.8.0-1 to 2.8.1-1 (12.3 KiB)

gerbv (2.8.0-1) unstable; urgency=medium

  * [e2538ad] d/watch: Update to use new GitHub location
  * [34085a7] New upstream version 2.8.0
  * [4314433] Rebuild patch queue from patch-queue branch
    Added patch:
    fixes/spelling-Correct-misspelled-word-seperatly.patch
    Dropped patches (fixed upstream):
    fixes/Fix-Werror-format-security-problem.patch
    fixes/gcc10-extern.patch

 -- Carsten Schoenert <email address hidden>  Sat, 13 Nov 2021 20:06:55 +0100

Available diffs

• diff from 2.7.1-1 to 2.8.0-1 (29.7 KiB)

gerbv (2.7.1-1) unstable; urgency=medium

  * [38d0ddf] New upstream version 2.7.1
    Fixes CVE-2021-40391
  * [9b4c05e] Rebuild patch queue from patch-queue branch
    Added patch:
    fixes/spelling-Correct-misspelled-word-Ignorning.patch
  * [13ff444] Running wrap-and-sort -ast
  * [c801436] d/control: Update Standards-Version to 4.6.0
    No further changes needed.
  * [c8fde80] d/control: Update Homepage field
    Upstream has moved it's home to a new URL, and also has moved the project
    development over to GitHub.
  * [b2efc1c] d/u/metadata: Adding basic upstream project data
  * [542e587] d/watch: Define version 4

 -- Carsten Schoenert <email address hidden>  Sun, 07 Nov 2021 11:19:36 +0100

Available diffs

• diff from 2.7.0-2 to 2.7.1-1 (689.2 KiB)

gerbv (2.7.0-2) unstable; urgency=medium

  [ أحمد المحمودي (Ahmed El-Mahmoudy) ]
  * [f3c7633] Add gcc10-extern.patch to use extern for global vars.
    (Closes: #957267)
  * [d4bc4e0] d/control: Bump Standards-Version to 4.5.0
    No further changes required.
  * [a4a40c9] Add Rules-Requires-Root: no
    We don't need any fakeroot rights while package build.
  * [f06e02f] debhelper: move over to dh-compat 12
  * [b11ae8e] Remove trailing whitespaces
  * [6d28787] debhelper: increase dh-compat to version 13
  * [ce4181a] rebuild patch queue from patch-queue branch
    renamed patch:
    gcc10-extern.patch
     -> fixes/gcc10-extern.patch

 -- Carsten Schoenert <email address hidden>  Sun, 07 Jun 2020 10:01:13 +0200

Available diffs

• diff from 2.7.0-1 to 2.7.0-2 (2.1 KiB)

gerbv (2.7.0-1) unstable; urgency=medium

  * [ac52385] d/gbp.conf: adding helper for git-buildpackage
  * [bf02ed4] New upstream version 2.7.0
    (Closes: #848953)
  * [8514cb5] rebuild patch queue from patch-queue branch
    added patches:
    fixes/gerbv.desktop-Add-Keywords-entry.patch
    fixes/gerbv.desktop-Add-main-category-to-desktop-file.patch
    fixes/man-page-fix-misspelled-excercise-exercise.patch
    fixes/Fix-Werror-format-security-problem.patch
    renamed patches:
    cross.patch-> 
    debian-hacks/crossbuild-use-PKG_PROG_PKG_CONFIG-instead-of-AC_PATH_PRO.patch
    0001-Desktop-file.patch ->
    debian/patches/debian-hacks/gerbv.desktop-Remove-encoding-key.patch
    0002-Fix-manpage.patch ->
    debian/patches/fixes/man-page-correct-groff-syntax-for-escaping-of-hyphens.patch
    removed patches:
    0004-pnp-can-t-use-screen-units.patch
  * [cf663cc] d/control: add myself to the Uploaders field
    Thanks Gudjon I. Gudjonsson for acknowledge to add myself.
  * [bee876e] d/control: small update to package description 
    (Closes: #703950)
  * [5b0b4bb] d/README.source: adding packaging information

 -- Carsten Schoenert <email address hidden>  Mon, 18 Feb 2019 17:57:45 +0100

Available diffs

• diff from 2.6.2-1 to 2.7.0-1 (2.8 MiB)

gerbv (2.6.2-1) unstable; urgency=medium

  * New upstream release
  * Bump standards version to 4.3.0
    No further chnanges needed.
  * Fix homepage and VCS in control file
  * Update patch No-translation-available
  * Fix spelling error in manpage
  * Add keywords to desktop file
  * Change main desktop category to development
  * Remove unneded files
  * Set DEB_BUILD_MAINT_OPTIONS for hardening
  * Remove Ramakrishnan Muthukrishnan from the uploaders field
    Thanks Ramakrishnan for all packaging work in the past!
    (Closes: #859286)
  * Change required debhelper version to >=12, also bumping compat version
    accordingly
  * Remove -No-translation-available patch, not needed.
    Thanks to Carsten Schoenert for help with the packaging

 -- Gudjon I. Gudjonsson <email address hidden>  Wed, 09 Jan 2019 22:15:20 +0100

Available diffs

• diff from 2.6.1-3 to 2.6.2-1 (2.5 MiB)

gerbv (2.6.1-3) unstable; urgency=medium

  * Add cross.patch to fix cross builds.
    Thanks to Helmut Grohne <email address hidden> (Closes: #879855)
  * Update standards version to 4.1.1
  * No need for autotools-dev sequence and dh-autoreconf dependency since we are using compat level 10

 -- أحمد المحمودي (Ahmed El-Mahmoudy) <email address hidden>  Sun, 19 Nov 2017 09:58:28 +0100

Available diffs

• diff from 2.6.1-2 to 2.6.1-3 (1.2 KiB)

gerbv (2.6.1-2) unstable; urgency=medium

  * Team upload.
  * Convert patches to git-buildpackage format
  * Add patch to fix FTBFS.
    This is a cherry-pick from upstream's git repository, ID dd8f9fa.
    (Closes: #851190)

 -- Dr. Tobias Quathamer <email address hidden>  Mon, 16 Jan 2017 09:47:02 +0100

Available diffs

• diff from 2.6.1-1 to 2.6.1-2 (3.3 KiB)

gerbv (2.6.1-1) unstable; urgency=medium

  * Team upload.
  * Imported Upstream version 2.6.1
    - Refresh patches
    - Remove non-existant translations
  * Acknowledge NMU, thanks to Tobias Frost. (Closes: #819437)
  * Apply changes from debian/2.5.0-1 to debian/2.6.0-1 again.
    Those changes have accidentally been overwritten by Gudjon I. Gudjonsson.
  * Remove Hamish Moffatt <email address hidden> from Uploaders. (Closes: #831477)
  * Update Vcs-* URLs
  * Remove menu file
  * Use debhelper v10 and dh-autoreconf
  * Remove configure option --enable-exportpng, not supported anymore

 -- Dr. Tobias Quathamer <email address hidden>  Mon, 26 Dec 2016 20:28:25 +0100

Available diffs

• diff from 2.6.0-1.1 to 2.6.1-1 (2.3 MiB)

gerbv (2.6.0-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * libpng1.6 transistion: Change B-D from libpng12-dev to libpng-dev
    (Closes: #662346)
  * Remove Wesley J. Landaker from Uploaders, thanks for his contributions.
    (Closes: #759986)
  * Add an icon to the menu file, patch from BTS (Closes: #768024)
  * Fix homepage in d/control (Closes: #718261)

 -- Tobias Frost <email address hidden>  Mon, 28 Mar 2016 15:45:07 +0200

Available diffs

• diff from 2.6.0-1 to 2.6.0-1.1 (1.1 KiB)

gerbv (2.6.0-1) unstable; urgency=low


  * New upstream release
  * Bump standards version to 3.9.3

 -- Gudjon I. Gudjonsson <email address hidden>  Wed, 07 Mar 2012 07:25:24 +0100

Available diffs

• diff from 2.5.0-1 (in Ubuntu) to 2.6.0-1 (526.9 KiB)

gerbv (2.5.0-1) unstable; urgency=low

  * New upstream release
  * Bump standards version to 3.9.2
  * Add git and homepage fields to control file
  * Switch to dpkg-source 3.0 (quilt) format
  * Rewrote both patches in quilt format
  * Change debhelper dependency to 8
  * Changed build targets according to new standard
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  19 Jun 2011 03:57:08 +0000

Available diffs

• diff from 2.4.0-1.1 to 2.5.0-1 (35.9 KiB)

gerbv (2.4.0-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Set LDFLAGS to -ldl (Closes: #554484).
  * Don't ship .la files (Closes: #621154).
 -- Angel Abad <email address hidden>   Fri,  17 Jun 2011 15:40:18 +0000

Available diffs

• diff from 2.4.0-1ubuntu1 to 2.4.0-1.1 (1.5 KiB)

gerbv (2.4.0-1ubuntu1) natty; urgency=low

  * debian/patches/03_fix_ftbfs_binutils-gold.dpatch
    - fix FTBFS binutils-gold with ld --no-add-needed (LP: #700263)
 -- Mahyuddin Susanto <email address hidden>   Sat, 08 Jan 2011 18:24:25 +0700

Available diffs

• diff from 2.4.0-1 to 2.4.0-1ubuntu1 (1.2 KiB)

gerbv (2.4.0-1) unstable; urgency=low

  [ Gudjon I. Gudjonsson ]
  * New upstream release
  * Bump standards version to 3.8.4
  * Remove patch 02_fix_manpage, fixed in upstream
  * Add misc depends

  [ Wesley J. Landaker ]
  * Override lintian warnings about the shared library. This package is small
    enough that splitting it doesn't make sense.
  * Add Gudjon to uploaders.
  * Move to debhelper compat level 7.
 -- Peter Clifton <email address hidden>   Mon,  08 Mar 2010 19:27:19 +0000

Available diffs

• diff from 2.3.0-1 to 2.4.0-1 (106.0 KiB)

gerbv (2.3.0-1) unstable; urgency=low

  * New upstream release (Closes: #539237, #272717, #404737)
  * Remove patch 01_remove_education.dpatch, not needed
  * Bump Standards-version to 3.8.3, no changes needed
  * Remove dh_desktop
  * Add menu file
  * Remove patch targets in rules file, add Debian standard dpatch targets
  * Add README.source
  * Add call to dh_makeshlibs
  * Remove patch 01_remove_education. Education main category is needed
  * Add more information to copyright file
  * rm config.guess and config.sub in clean target
  * Exclude Makefile* from being installed to examples
  * Add dependency on autotools-dev
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  05 Dec 2009 21:31:31 +0000

Available diffs

• diff from 2.0.1-3 to 2.3.0-1 (569.0 KiB)

gerbv (2.0.1-3) unstable; urgency=low

  * debian/control: made extra-xdg-menus as a recommendation instead of
  dependency.

gerbv (2.0.1-1) unstable; urgency=low

  * New upstream release

 -- Peter Clifton <email address hidden>   Mon,  11 Feb 2008 20:08:11 +0000

gerbv (2.0.0-5) unstable; urgency=low

  * debian/rules: More cleanups. It does not delete the config.* files
  anymore. Instead it is copied from /usr/share/misc directory and used.
  This should make buildd happy. Tested with pbuilder.

gerbv (1.0.2-1) unstable; urgency=medium

  * New upstream release
    * Fix incorrect display in some locales (closes: #374131, #302530)
      * Urgency medium as this bug is "grave"
    * Add desktop and icon files (closes: #367366)
  * Updated standards-revision to 3.7.2

 -- Lucas Nussbaum <email address hidden>   Fri,  01 Sep 2006 17:49:19 +0100

gerbv (1.0.1-2ubuntu1) dapper; urgency=low

  * Add desktop file from Vassilis Pandis (Closes Malone: #44281)

 -- Barry deFreese <email address hidden>   Sat, 20 May 2006 15:15:42 -0400

gerbv (1.0.1-2) unstable; urgency=low


  * Removed build-dep for xlibs-dev (requires gtk only)

 -- Hamish Moffatt <email address hidden>  Sun,  8 Jan 2006 14:27:15 +1100

gerbv (1.0.1-1) unstable; urgency=low


  * New upstream release (closes: #301281), now compiled with GTK+ 2.0
    rather than 1.2
  * Fixed FTBFS with gcc-4.0 (src/drill.c); thanks to Andreas Jochens
    for the patch (closes: #286504)

 -- Hamish Moffatt <email address hidden>  Fri, 25 Mar 2005 23:06:53 +1100

gerbv (0.16-1) unstable; urgency=low


  * New upstream release

 -- Hamish Moffatt <email address hidden>  Sun, 15 Aug 2004 15:34:15 +1000

gerbv (0.15-1) unstable; urgency=low


  * New upstream release

 -- Hamish Moffatt <email address hidden>  Sun,  1 Feb 2004 14:16:20 +1100