Debian Security Advisory

DSA-5214-1 kicad -- security update

Date Reported:
21 Aug 2022
Affected Packages:
kicad
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2022-23803, CVE-2022-23804, CVE-2022-23946, CVE-2022-23947.
More information:

Multiple buffer overflows were discovered in Kicad, a suite of programs for the creation of printed circuit boards, which could result in the execution of arbitrary code if malformed Gerber/Excellon files.

For the stable distribution (bullseye), these problems have been fixed in version 5.1.9+dfsg1-1+deb11u1.

We recommend that you upgrade your kicad packages.

For the detailed security status of kicad please refer to its security tracker page at: https://security-tracker.debian.org/tracker/kicad