Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 8: 2022-0137 Moderate: GDAL Buffer Overflow Threat

mageia
Calendar Grey April 9, 2022
Dist Mageia Esm H88
Mageia enhances gdal software packages to address a severe buffer overflow security issue effective April 9, 2022.
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::C...

Summary

GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment). (CVE-2021-45943)

References

- https://bugs.mageia.org/show_bug.cgi?id=30256

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/P23E4DEHY5FJCR5VJ46I6TO32DT7Y3T4/

- https://www.cve.org/CVERecord?id=CVE-2021-45943

Topics%20covered

Topics Covered

security advisory security update buffer overflow software patch moderate severity Mageia GDAL

Resolution

SRPMS

- 8/core/gdal-3.1.3-7.2.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 09 Apr 2022
URL: https://advisories.mageia.org/MGASA-2022-0137.html
Type: security
CVE: CVE-2021-45943

Topics%20covered

Topics Covered

security advisory security update buffer overflow software patch moderate severity Mageia GDAL

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here