File _patchinfo of Package patchinfo.36301
<patchinfo incident="36301">
<issue tracker="cve" id="2024-42415"/>
<issue tracker="cve" id="2024-36474"/>
<issue tracker="bnc" id="1231283">VUL-0: CVE-2024-42415: libgsf: integer overflow in the compound document binary file format parser allows for a heap-based buffer overflow when processing the sector allocation table</issue>
<issue tracker="bnc" id="1231282">VUL-0: CVE-2024-36474: libgsf: integer overflow in the compound document binary file format allows for an out-of-bounds index to be used when processing a directory</issue>
<packager>mgorse</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for libgsf</summary>
<description>This update for libgsf fixes the following issues:
- CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283).
</description>
</patchinfo>