CVE-2023-4863

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

-------------------

Bug fix release

* Loading now uses `skip_broken_datasets=True` by default. (1001)
* Bump base osgeo/gdal docker image version. (1003)
* Update versions of several upstream packages to avoid known security issues (1004, 1005, 1008)
* pre-commit autoupdate (1006)
* Make S3 URL rewriting work with metadata indexed from STAC (1011)
* Update HISTORY.rst and increment default version for release and some tests. (1013)

This release includes contributions from whatnick, pjonsson, SpacemanPaul, and various automatic updater bots.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863
• https://github.com/opendatacube/datacube-ows/pull/1004/commits/6e24f1a9922727e2a6559a74e08f0e330adc3a5d