Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 5 articles for you...
172
security advisorydenial of serviceUbuntuUbuntu 16.04 LTS GDAL Important Denial Of Service CVE-2025-9900 USN-8345-1
GDAL could be made to crash or run programs if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8345-1 May 28, 2026 gdal vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: GDAL could be made to crash or run programs if it received specially crafted input. Software Description: - gdal: Geospatial Data Abstraction Library Details: It was discovered that the vendored LibTIFF in GDAL incorrectly handled memory when parsing malformed TIFF image metadata. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS gdal-bin 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro libgdal-dev 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro libgdal-java 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro libgdal-perl 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro libgdal1i 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro python-gdal 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro python3-gdal 1.11.3+dfsg-3ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS gdal-bin 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro libgdal-dev 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro libgdal-java 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro libgdal-perl 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro libgdal1h 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro python-gdal 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro python3-gdal 1.10.1+dfsg-5ubuntu1+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8345-1 CVE-2025-9900 . GDAL for Ubuntu may crash or allow arbitrary code execution with crafted input. Update to secure your systems.. GDAL Ubuntu Denial of Service. . Severity: Important. LinuxSecurity.com Team
May 29, 2026
•Important
Ubuntu
91
security advisorydenial of servicegentooGentoo: GLSA-202210-16 High: OpenSSL Certificate Validation Vulnerability
A heap buffer overflow vulnerability has been found in GDAL which could result in denial of service.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202210-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: GDAL: Heap Buffer Overflow Date: October 31, 2022 Bugs: #830370 ID: 202210-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A heap buffer overflow vulnerability has been found in GDAL which could result in denial of service. Background ========= GDAL is a geospatial data abstraction library. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sci-libs/gdal < 3.4.1 > = 3.4.1 Description ========== GDAL does not sufficiently sanitize input when loading PCIDSK binary segments. Impact ===== Loading crafted PCIDSK data via GDAL could result in denial of service. Workaround ========= There is no known workaround at this time. Resolution ========= All GDAL users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sci-libs/gdal-3.4.1" References ========= [ 1 ] CVE-2021-45943 https://nvd.nist.gov/vuln/detail/CVE-2021-45943 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202210-15 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressedto
Oct 30, 2022
•Low
Gentoo
197
security advisorydenial of servicedebianDebian 10 buster DLA-3129-1 Moderate: gdal Denial Of Service Threat
Two issues were found in GDAL, a geospatial library, that could lead to denial of service via application crash or possibly the execution of arbitrary code if maliciously crafted data was parsed. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3129-1
Oct 01, 2022
Debian LTS
87
security advisorydenial of servicebuffer overflowDebian: DSA-5240-1 Urgent: libxyz Memory Leak and Service Crash
A heap-based buffer overflow vulnerability was discovered in gdal, a Geospatial Data Abstraction Library, which could result in denial of service or potentially the execution of arbitrary code, if a specially crafted file is processed with the PCIDSK driver. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5239-1
Sep 27, 2022
•Critical
Debian
89
security advisoryfedorabuffer overflowFedora 35: FEDORA-2023-dcbe783a83 Urgent: OpenSSL Security Flaw
Backport patch for CVE-2021-45943.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-cffca5dbf4 2022-04-06 18:44:22.683037 --------------------------------------------------------------------------------Name : gdal Product : Fedora 34 Version : 3.2.2 Release : 3.fc34 URL : https://gdal.org/en/latest/ Summary : GIS file format library Description : Geospatial Data Abstraction Library (GDAL/OGR) is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline utilities for data translation and processing. It provides the primary data access engine for many applications. GDAL/OGR is the most widely used geospatial data access library. --------------------------------------------------------------------------------Update Information: Backport patch for CVE-2021-45943. --------------------------------------------------------------------------------ChangeLog: * Fri Feb 4 2022 Sandro Mani - 3.2.2-3 - Backport patch for CVE-2021-45943 --------------------------------------------------------------------------------References: [ 1 ] Bug #2049069 - CVE-2021-45943 gdal: heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2049069 [ 2 ] Bug #2049070 - CVE-2021-45943 mingw-gdal: gdal: heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2049070 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-cffca5dbf4' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 06, 2022
•Important
Fedora
89
security advisoryupdatebuffer overflowFedora 35 Advisory FEDORA-2022-e85e37206b Critical: mingw-python3 Overflow
Update to gdal-3.3.3 and python-3.10.4.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-e85e37206b 2022-04-05 15:42:46.531282 --------------------------------------------------------------------------------Name : mingw-python3 Product : Fedora 35 Version : 3.10.4 Release : 1.fc35 URL : https://www.python.org/ Summary : MinGW Windows python3 Description : MinGW Windows python3 library. --------------------------------------------------------------------------------Update Information: Update to gdal-3.3.3 and python-3.10.4. --------------------------------------------------------------------------------ChangeLog: * Mon Mar 28 2022 Sandro Mani - 3.10.4-1 - Update to 3.10.4 * Fri Mar 25 2022 Sandro Mani - 3.10.3-2 - Rebuild with mingw-gcc-12 * Sun Mar 20 2022 Sandro Mani - 3.10.3-1 - Update to 3.10.3 * Mon Feb 28 2022 Sandro Mani - 3.10.2-14 - Re-add wrapper scripts under mingw host bin dir * Sun Feb 27 2022 Sandro Mani - 3.10.2-13 - Require python%{py_ver} rather than python(abi) = %{py_ver} * Wed Feb 23 2022 Sandro Mani - 3.10.2-12 - Rework macros * Thu Feb 17 2022 Sandro Mani - 3.10.2-11 - Rebuild (openssl) * Fri Feb 11 2022 Sandro Mani - 3.10.2-10 - Override runtime_library_dir_option in distutils Mingw32Compiler to prevent unsupported -Wl,--enable-new-dtags getting added to ldflags * Thu Feb 10 2022 Sandro Mani - 3.10.2-9 - Rebuild for new python dependency generator (take two) * Thu Feb 10 2022 Sandro Mani - 3.10.2-8 - Bump release * Thu Feb 10 2022 Sandro Mani - 3.10.2-7 - Add missing dependency generator namespace for provides * Thu Feb 10 2022 Sandro Mani - 3.10.2-6 - Rebuild for new python dependency generator * Thu Feb 10 2022 Sandro Mani - 3.10.2-5 - Install dependency generators * Sat Jan 22 2022 Sandro Mani - 3.10.2-4 - Also set CFLAGS/CXX/CXXFLAGS/LDFLAGS in mingw-python wrappers * Fri Jan 21 2022 Tom Stellard -3.10.2-3 - Build fix for https://fedoraproject.org/wiki/Changes/SetBuildFlagsBuildCheck * Thu Jan 20 2022 Fedora Release Engineering - 3.10.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Jan 18 2022 Sandro Mani - 3.10.2-1 - Update to 3.10.2 --------------------------------------------------------------------------------References: [ 1 ] Bug #2049069 - CVE-2021-45943 gdal: heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2049069 [ 2 ] Bug #2049070 - CVE-2021-45943 mingw-gdal: gdal: heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2049070 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e85e37206b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 05, 2022
•Critical
Fedora
89
security advisorybuffer overflowsoftware updateUbuntu 22.04: 2023-a12b45678c Critical: libxml2 Memory Leak
Update to gdal-3.3.3 and python-3.10.4.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-e85e37206b 2022-04-05 15:42:46.531282 --------------------------------------------------------------------------------Name : gdal Product : Fedora 35 Version : 3.3.3 Release : 1.fc35 URL : https://gdal.org/en/latest/ Summary : GIS file format library Description : Geospatial Data Abstraction Library (GDAL/OGR) is a cross platform C++ translator library for raster and vector geospatial data formats. As a library, it presents a single abstract data model to the calling application for all supported formats. It also comes with a variety of useful commandline utilities for data translation and processing. It provides the primary data access engine for many applications. GDAL/OGR is the most widely used geospatial data access library. --------------------------------------------------------------------------------Update Information: Update to gdal-3.3.3 and python-3.10.4. --------------------------------------------------------------------------------ChangeLog: * Fri Feb 4 2022 Sandro Mani - 3.3.3-1 - Update to 3.3.3 * Fri Feb 4 2022 Sandro Mani - 3.3.2-2 - Backport patch for CVE-2021-45943 --------------------------------------------------------------------------------References: [ 1 ] Bug #2049069 - CVE-2021-45943 gdal: heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2049069 [ 2 ] Bug #2049070 - CVE-2021-45943 mingw-gdal: gdal: heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2049070 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e85e37206b' at the command line. For moreinformation, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 05, 2022
•Critical
Fedora
197
security advisorydenial of servicecritical issueDebian 9: DLA-2877-1 Important Announce: gdal DoS Vulnerability
Two issues were found in GDAL, a geospatial library, that could lead to denial of service via application crash or possibly the execution of arbitrary code if maliciously crafted data was parsed. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2877-1
Jan 12, 2022
•Important
Debian LTS
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!