[SECURITY] [DLA 2877-1] gdal security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2877-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 12, 2022 https://wiki.debian.org/LTS -...

MGASA-2020-0068 Updated gdal packages fix security vulnerability

Updated gdal packages fix security vulnerability: Double free vulnerability in OGRExpatRealloc CVE-2019-17545. Also, the gdalinfo command, which had been built incorrectly, has been fixed...

Updated gdal packages fix security vulnerability

Updated gdal packages fix security vulnerability: Double free vulnerability in OGRExpatRealloc CVE-2019-17545. Also, the gdalinfo command, which had been built incorrectly, has been fixed...

openSUSE: Security Advisory for gdal (openSUSE-SU-2019:2466-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : mingw-gdal (2019-a6960910d8)

This update fixes CVE-2019-17545. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

Fedora 31 : mingw-cfitsio / mingw-gdal (2019-f511b38b1f)

This update fixes CVE-2019-17545. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

openSUSE Security Update : gdal (openSUSE-2019-2466)

This update for gdal to version 2.4.3 fixes the following issues : gdal was updated to 2.4.3 : - CVE-2019-17545: Fixed a double free vulnerability in OGRExpatRealloc boo1153918. - Multiple bug and stability fixes For more information regarding the release at:...

Debian: Security Advisory (DLA-1984-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-17545

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...

apls (>=0.0.6 <=0.1.0), datacube (=1.6.2) +16 more potentially affected by CVE-2019-17545 via gdal (>=2.1.0 <=3.0.1)

gdal PYPI version =2.1.0, =0.0.6, =0.1.0, =0.0.35, =0.1.0, =1.0.60, =0.0.4, =0.1.2, =1.0.16, =0.9.0, =0.0.6, =0.0.3, =0.1.0 - routing-ortools-osrm =1.0.1 and more Source cves: CVE-2019-17545 Source advisory: OSV:PYSEC-2019-241...

CVE-2019-17545

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...

CVE-2019-17545

CVE-2019-17545 affects GDAL up to 3.0.1, with a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. Public advisories (Debian DLA-2877/3129, Mageia, Fedora) confirm the issue and list CVE-2019-17545 as fixable by upgrading GDAL to newer builds; Deb...