Due to a critical bug in GeoJSON ingestion we have made an early release of 
versions 2.0.7 and 2.1.7. If you are running an earlier version on a public 
site and accepting incoming GeoJSON, we recommend you update as soon as 
possible.

  http://postgis.net/source
 
The resolved issue would cause the back-end to crash when certain malformed 
GeoJSON is fed to it. This could be used to effectively run a denial-of-service 
attack on a public-facing web service.

Sorry to release a new patch soon soon after 2.1.6, but the nature of issue 
warranted it.

ATB,

Team PostGIS
_______________________________________________
postgis-users mailing list
[email protected]
http://lists.osgeo.org/cgi-bin/mailman/listinfo/postgis-users

Reply via email to