SUSE-SU-2022:0134-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2022:0134-1

UNKNOWN

Security update for python-numpy

Published Oct 17, 2022

Modified 3 years ago

Fix available

Details

This update for python-numpy fixes the following issues:

CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913).
CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from_pyobj function of fortranobject.c (bsc#1193907).

Affected Packages

python-numpy

SUSE Linux Enterprise Module for Basesystem 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python3-numpy

SUSE Linux Enterprise Module for Basesystem 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python3-numpy-devel

SUSE Linux Enterprise Module for Basesystem 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python-numpy_1_17_3-gnu-hpc

SUSE Linux Enterprise Module for HPC 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python3-numpy-gnu-hpc

SUSE Linux Enterprise Module for HPC 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python3-numpy-gnu-hpc-devel

SUSE Linux Enterprise Module for HPC 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python3-numpy_1_17_3-gnu-hpc

SUSE Linux Enterprise Module for HPC 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

python3-numpy_1_17_3-gnu-hpc-devel

SUSE Linux Enterprise Module for HPC 15 SP3SUSE Linux Enterprise Real Time 15 SP2

Fixed in:

1.17.3-10.1

References

https://bugzilla.suse.com/1193907

https://bugzilla.suse.com/1193913

https://www.suse.com/security/cve/CVE-2021-33430

https://www.suse.com/security/cve/CVE-2021-41496

https://www.suse.com/support/update/announcement/2022/suse-su-20220134-1/

Upstream

CVE-2021-33430 CVE-2021-41496

Related

CVE-2021-33430 CVE-2021-41496

Ecosystems

SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for HPC 15 SP3 SUSE Linux Enterprise Real Time 15 SP2

Timeline

PublishedOct 17, 2022

ModifiedOct 17, 2022