MGASA-2022-0465

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2022-0465.html
Import Source
https://advisories.mageia.org/MGASA-2022-0465.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2022-0465
Related
Published
2022-12-13T22:09:19Z
Modified
2022-12-13T21:16:10Z
Summary
Updated matio packages fix security vulnerability
Details

matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). (CVE-2020-36428)

matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy (called from H5MMmalloc and H5Cloadentry), related to use of HDF5 1.12.0. (CVE-2021-36977)

References
Credits

Affected packages

Mageia:8 / matio

Package

Name
matio
Purl
pkg:rpm/mageia/matio?arch=source&distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.5.23-1.mga8

Ecosystem specific 

{
    "section": "core"
}