Skip to content
OpenAdvisories
Medium ELSA-2019-3704 1 CVE

Moderate: numpy security update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Ecosystem: Oracle Linux

Summary

[1:1.14.3-9]
- Fix CVE-2019-6446
resolves: #1668466

[1:1.14.3-8]
- Rebuild with fixed gating.yaml
related: #1687873

[1:1.14.3-7]
- Fix broken float128 on all arches except x86_64
resolves: #1687873

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 python3-numpy 1:1.14.3-9.el8
Oracle Linux · 8 python3-numpy-f2py 1:1.14.3-9.el8

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-6446 Public exploit EPSS 27%

    Numpy Deserialization of Untrusted Data

    An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue be…

    numpy PyPI