CVE-2020-10809

Advisory

Mapchete 2022.11.0 updates its dependency 'rasterio' requirement to '>1.2.10' to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

----------------------

* core
* GTiff driver: force blocksize being int (496)
* fix TileDirectory read error from exotic CRSes (498)
* split up `raster.io.RasterioRemoteWriter` class to memory and tempfile subclasses (500)
* make sure dask_compute_graph and dask_chunksize are passed on (502)

* CLI
* print task details also when using dask executor when `--verbose` flag is active (501)

* packaging
* exclude vulnerable rasterio dependency (490)
* add python-dateutil to package requirements (495)
* rename `master` branch to `main`

* tests
* add Python 3.10 to tests


---------------------

Resources

• https://pypi.org/project/mapchete
• https://pyup.io/changelogs/mapchete/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10809