Debian alert DLA-4451-1 (shapelib)

From:
             
 
Thorsten Alteholz <debian@alteholz.de>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4451-1] shapelib security update
Date:
             
 
Sat, 24 Jan 2026 18:47:47 +0000
Message-ID:
             
 
<1c413ccd-e0c8-3d94-88fa-d0e2e58e8cd9@alteholz.de>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4451-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                    Thorsten Alteholz
January 24, 2026                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : shapelib
Version        : 1.5.0-2+deb11u1
CVE ID         : CVE-2022-0699


An issue has been found in shapelib, a library for reading and writing 
ESRI Shapefiles.
The issue is related to a double free, which results in a crash and a 
denial of service.


For Debian 11 bullseye, this problem has been fixed in version
1.5.0-2+deb11u1.

We recommend that you upgrade your shapelib packages.

For the detailed security status of shapelib please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/shapelib

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

-----BEGIN PGP SIGNATURE-----
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=4ow9
-----END PGP SIGNATURE-----