Re: [gdal-dev] Question: CPL minizip affected by CVE-2023-45853?

2023-11-03 Thread James Addison via gdal-dev
e 03/11/2023 à 16:17, James Addison via gdal-dev a écrit : > > Hi folks, > > > > I've arrived at the gdal mailing list after reading the security > > policy[1] on the GitHub repository, but then decided that this is as > > much a question as it is a bug,

[gdal-dev] Question: CPL minizip affected by CVE-2023-45853?

2023-11-03 Thread James Addison via gdal-dev
Hi folks, I've arrived at the gdal mailing list after reading the security policy[1] on the GitHub repository, but then decided that this is as much a question as it is a bug, so I'm following the issue template comment advice[2] to post here. The Common Portability Library within gdal includes s