Skip to content
OpenAdvisories
Critical RHSA-2019:3704 1 CVE

Red Hat Security Advisory: numpy security update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy 1:1.14.3-9.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy-debugsource 1:1.14.3-9.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-numpy 1:1.14.3-9.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-numpy-debuginfo 1:1.14.3-9.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-numpy-f2py 1:1.14.3-9.el8

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-6446 Public exploit EPSS 27%

    Numpy Deserialization of Untrusted Data

    An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue be…

    numpy PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1667950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1687873
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3704.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-6446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-6446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-6446