Add patch to fix validation issues in cpl_zipOpenNewFileInZip3() (CVE-2023-45853) - Githubissues

conda-forge / gdal-feedstock

A conda-smithy repository for gdal.

BSD 3-Clause "New" or "Revised" License

30 stars 63 forks source link

Add patch to fix validation issues in cpl_zipOpenNewFileInZip3() (CVE-2023-45853) #833

Closed rouault closed 12 months ago

rouault commented 12 months ago

Cherry-picking of upstream commit https://github.com/OSGeo/gdal/commit/725070cc38cd47d870bc1ed394b9275013aab79e

(will have to be dropped for 3.8.0)

Checklist

[X] Used a personal fork of the feedstock to propose changes
[X] Bumped the build number (if the version is unchanged)
[ ] Reset the build number to 0 (if the version changed)
[ ] Re-rendered with the latest conda-smithy (Use the phrase code>@<space/conda-forge-admin, please rerender in a comment in this PR for automated rerendering)
[ ] Ensured the license file is being packaged.

conda-forge-webservices[bot] commented 12 months ago

Hi! This is the friendly automated conda-forge-linting service.

I just wanted to let you know that I linted all conda-recipes in your PR (recipe) and found it was in an excellent condition.

rouault commented 12 months ago

@conda-forge-admin, please rerender

github-actions[bot] commented 12 months ago

Hi! This is the friendly automated conda-forge-webservice.

I tried to rerender for you, but it looks like there was nothing to do.

This message was generated by GitHub actions workflow run https://github.com/conda-forge/gdal-feedstock/actions/runs/6755157090.

akrherz commented 12 months ago

Thank you very much @rouault for supporting the conda-forge build of GDAL like this!

github-actions[bot] commented 12 months ago

Hi! This is the friendly conda-forge automerge bot!

I considered the following status checks when analyzing this PR:

linter: passed
azure: passed

Thus the PR was passing and merged! Have a great day!