PyPI/fiona: high 7.1

Fiona affected by CVE-2020-14152 related to madler-zlib

Action: Upgrade fiona to 1.10b2 or later.

pip install fiona==1.10b2

Affected

Fixed versions

Sources

• osv: GHSA-g4m4-9q4c-mfw6
• https://github.com/Toblerity/Fiona/security/advisories/GHSA-g4m4-9q4c-mfw6
• https://nvd.nist.gov/vuln/detail/CVE-2020-14152
• https://github.com/libjpeg-turbo/libjpeg-turbo/issues/500
• https://github.com/OSGeo/gdal/commit/075480a3cba13c9dd2ab4e39e92d6147a6c98eca
• https://github.com/Toblerity/Fiona/commit/07708211726e276e22dedb9cd567b4f6a7b8c809
• https://github.com/libjpeg-turbo/libjpeg-turbo/commit/da2a27ef056a0179cbd80f9146e58b89403d9933
• https://github.com/Toblerity/Fiona

published 2024-07-16T19:32:22Z · modified 2024-12-01T05:38:41.596432Z · JSON