Debian Gsl vulnerabilities

CVE-2024-50610 [LOW] CVE-2024-50610: gsl - GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_... GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 2.8+dfsg-4) sid: resolved (fixed in 2.8+dfsg-4) trixie: resolved (fixed in 2.8+dfsg-4)

CVE-2020-35357 [MEDIUM] CVE-2020-35357: gsl - A buffer overflow can occur when calculating the quantile value using the Statis... A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution. Scope: local bookworm: resolved (fixed in 2.7.1