Red Hat Security Advisory: Red Hat OpenStack Platform 16.1 (numpy) security update

Fixed packages 5

Vulnerabilities 2

• Medium 5.5
  CVE-2021-41496

  Buffer Copy without Checking Size of Input in NumPy

  Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability…

  numpy numpy numpy numpy Debian Ubuntu Azure Linux PyPI
  Dec 17, 2021
• Medium 5.3
  CVE-2021-33430

  NumPy Buffer Overflow (Disputed)

  A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does …

  numpy numpy numpy Debian Ubuntu PyPI
  Dec 17, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2035034
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2035040
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0987.json
• report
  https://access.redhat.com/security/cve/CVE-2021-33430
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33430
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33430
• report
  https://access.redhat.com/security/cve/CVE-2021-41496
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41496
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41496