gmp Bug Fix and Enhancement Update
Summary
ALBA-2019:3645: gmp bug fix and enhancement update. Affects gmp versions < 1:6.1.2-10.el8. Fixed in 1:6.1.2-10.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The gmp package is a library for arbitrary precision arithmetic, operating on signed integers, rational numbers, and floating-point numbers. It is widely used in various applications that require high-precision calculations. This vulnerability affects the gmp package in AlmaLinux 8.
Vulnerability Detail
This update addresses a bug and includes enhancements for the gmp package. The bug fix resolves a specific issue that could potentially lead to security vulnerabilities or incorrect calculations. The enhancements provide improved functionality and performance for the package.
How To Fix
Minimum fixed version
1:6.1.2-10.el8
This is the first release that contains the fix.
sudo dnf update gmp
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the gmp package in AlmaLinux 8 has been updated to address a bug and provide enhancements. It is recommended to update the package to the fixed version to mitigate any potential security vulnerabilities or calculation errors. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for gmp →
FAQ
The gmp package is a library for arbitrary precision arithmetic, commonly used in applications that require high-precision calculations.
This vulnerability could potentially lead to security vulnerabilities or incorrect calculations in applications that use the gmp package.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will provide real-time alerts for open-source vulnerabilities.
No specific workaround is mentioned for this vulnerability. It is recommended to update the gmp package to the fixed version.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked from the References section of the advisory.
References
Related vulnerabilities
Recent vulnerabilities recorded for gmp.