Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 39: FEDORA-2024-34301311f8 Critical: liblas Memory Leak DoS

fedora
Calendar Grey March 13, 2024
Dist Fedora Esm H88
This patch for Fedora 39 resolves an issue with memory allocation in liblas that might cause service interruptions.
Update to git f1da555, fixes CVE-2024-27507.

Summary

libLAS is a C/C++ library for reading and writing the very common LAS LiDAR

format. The ASPRS LAS format is a sequential binary format used to store

data from LiDAR sensors and by LiDAR processing software for data

interchange and archival.

Update Information:

Update to git f1da555, fixes CVE-2024-27507.

Topics%20covered

Topics Covered

security advisory fedora memory leak dos liblas

Change Log

* Mon Mar 4 2024 Sandro Mani - 1.8.2-0.12.gitf1da555 - Update to git f1da555, fixes CVE-2024-27507 * Thu Jan 25 2024 Fedora Release Engineering - 1.8.2-0.11.gitded4637 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 1.8.2-0.10.gitded4637 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jan 18 2024 Jonathan Wakely - 1.8.2-0.9.gitded4637 - Rebuilt for Boost 1.83 * Wed Nov 15 2023 Sandro Mani - 1.8.2-0.8.gitded4637 - Rebuild (gdal)

References


[ 1 ] Bug #2266402 - TRIAGE CVE-2024-27507 liblas: memory leak may lead to DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266402

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-34301311f8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: liblas
Product: Fedora 39
Version: 1.8.2
Release: 0.12.gitf1da555.fc39
URL: Summary : Library for reading and writing the very common LAS LiDAR format

Topics%20covered

Topics Covered

security advisory fedora memory leak dos liblas

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here