-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 26 Oct 2021 20:33:47 +0300 Source: gpsd Binary: gpsd gpsd-dbg gpsd-clients python-gps libgps22 libgps-dev libqgpsmm22 libqgpsmm-dev Architecture: source Version: 3.16-4+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Bernd Zeimetz <bzed@debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: gpsd - Global Positioning System - daemon gpsd-clients - Global Positioning System - clients gpsd-dbg - Global Positioning System - debugging symbols libgps-dev - Global Positioning System - development files libgps22 - Global Positioning System - library libqgpsmm-dev - Global Positioning System - Qt wrapper for libgps (development) libqgpsmm22 - Global Positioning System - Qt wrapper for libgps python-gps - Global Positioning System - Python libraries Changes: gpsd (3.16-4+deb9u1) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2018-17937: A stack-based buffer overflow may allow remote attackers to execute arbitrary code via traffic on port 2947/TCP or crafted JSON inputs. Checksums-Sha1: c49c99ce54cf5b72842fdeccf5c5d9b902d3f095 2575 gpsd_3.16-4+deb9u1.dsc f211a45eb6e8d067df2d02f7d9347e3977296ed9 8587490 gpsd_3.16.orig.tar.gz 8b106dbfc1b3be594221f48436af3a2604945a5f 36732 gpsd_3.16-4+deb9u1.debian.tar.xz Checksums-Sha256: d0ffab9e177c7601bfe11e9138fde8b1b47a2b80393668a1ffb20d96c3662770 2575 gpsd_3.16-4+deb9u1.dsc 03579af13a4d3fe0c5b79fa44b5f75c9f3cac6749357f1d99ce5d38c09bc2029 8587490 gpsd_3.16.orig.tar.gz 76599f9a5be6f88680975becc09d3869b242d2e3c25e010fa8870aef6b4fcf87 36732 gpsd_3.16-4+deb9u1.debian.tar.xz Files: 84d92808ee22b7f2b62d46fdc3373cbd 2575 misc optional gpsd_3.16-4+deb9u1.dsc 68691b5de4c94f82ec4062b042b5eb63 8587490 misc optional gpsd_3.16.orig.tar.gz 0f60181a4962e74ee5166d82c6689928 36732 misc optional gpsd_3.16-4+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmF67dkACgkQiNJCh6LY mLFZDRAAmi77BTNjv8XOHqMhGZpnvOwO6xwWBtfLfEMUV25WA6H8DhgTTiV9bPUZ 42zWrsMN7uBquR9iJhMm3gKyqJlCwlATT4ORNH0sW3L/s2BuIajqITaN+tNDE3b5 yiNmMYM4YVrx4Cv0fKM12K0yUhIEv72WCkBlgiR60qxm9BCZZeV21YjtHUy6+qK9 TR01Yv/jV8CH1cpJzyhqSUuEOSeWhGbRkHP9kkXQk2qyP+6Xz2EIR6xKayySTC4K Dd3CUfEQNLW583ZxnlbnpJJzW30T+6oPYaUZ2yph3CMiw0RS09wk8sYVCDqXCEvN 0bZ2LRn5CtM5Gj1C6DWyTwGQwnVlzDXcf59msnY1B4AiORJxwgwjLsA4H7l9dN+E mUL4nUdOFIjhbr21Y8hB9+CiInhk5pGs86iucbm3KPStcMhgOb9tPd+01QkNifkO cnSo2lhpPYX6O4VmJV6Dlm68aQLX0UPwc2kX+xFKsYjoj/DDOHIxDdFV7pT08IQT 1iAb2iQDP4eJPjlExeFZUUL6bZffoafD52qD4d4+F9V0tar7r80G2W5HwvDintG2 x/iPvpD2yHYClU2l1ljlwrz+wEbeLRx58/ghPGiezsJICOzBYp/UAI9KIM0H3+3S QXmGTeGRqG1vO2zhc4Gvji9hJISMlaQ3pYJnkH63lXt8oIZ+Cec= =QTzK -----END PGP SIGNATURE-----