gdal:gdal_fuzzer: Heap-buffer-overflow in RMFDataset::WriteHeader

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5038492226289664 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x60300001b53f Cras...

gdal:fgb_fuzzer: Heap-buffer-overflow in flatbuffers::Table::VerifyOffset

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4642513358553088 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: fgbfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60400000437c Crash...

gdal:gdal_vector_translate_fuzzer: Heap-use-after-free in OGRGeometryCollection::addGeometryDirectly

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6012817121083392 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvectortranslatefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

gdal:zarr_fuzzer: Heap-buffer-overflow in ZarrArray::BlockTranspose

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5161103430123520 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: zarrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x604000006208 Cras...

Mageia: Security Advisory (MGASA-2022-0137)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0137 Updated gdal packages fix security vulnerability

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment. CVE-2021-45943...

Updated gdal packages fix security vulnerability

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment. CVE-2021-45943...

Fedora: Security Advisory for gdal (FEDORA-2022-cffca5dbf4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mingw-gdal (FEDORA-2022-cffca5dbf4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: gdal-3.2.2-3.fc34

Geospatial Data Abstraction Library GDAL/OGR is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline...

[SECURITY] Fedora 34 Update: mingw-gdal-3.2.2-3.fc34

MinGW Windows GDAL library...

Fedora: Security Advisory for gdal (FEDORA-2022-e85e37206b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mingw-gdal (FEDORA-2022-e85e37206b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: mingw-gdal-3.3.3-3.fc35

MinGW Windows GDAL library...

gdal:gmlas_fuzzer: Crash in xercesc_4_0::CMStateSet::~CMStateSet

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6074850496610304 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gmlasfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00010000001d Crash State:...

AlmaLinux 8 : libtiff (ALSA-2020:4634)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2020:4634 advisory. - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer...

Mageia: Security Advisory (MGASA-2020-0068)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0451)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gdal:gdal_fuzzer: Container-overflow in std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5988013182681088 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x6080000055e8 Crash...

Debian: Security Advisory (DLA-2877-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...