File _patchinfo of Package patchinfo.36301

<patchinfo incident="36301">
  <issue tracker="cve" id="2024-42415"/>
  <issue tracker="cve" id="2024-36474"/>
  <issue tracker="bnc" id="1231283">VUL-0: CVE-2024-42415: libgsf: integer overflow in the compound document binary file format parser allows for a heap-based buffer overflow when processing the sector allocation table</issue>
  <issue tracker="bnc" id="1231282">VUL-0: CVE-2024-36474: libgsf: integer overflow in the compound document binary file format allows for an out-of-bounds index to be used when processing a directory</issue>
  <packager>mgorse</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for libgsf</summary>
  <description>This update for libgsf fixes the following issues:

- CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283).
</description>
</patchinfo>
openSUSE Build Service is sponsored by