ALT-PU-2024-9087

Критический

ALT-PU-2024-9087: package python3-module-scipy update to version 1.6.1-alt3.p10.1

Источник

errata.altlinux.org

Дата публикации

28.06.2024

Дата обновления

28.06.2024

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades python3-module-scipy to version 1.6.1-alt3.p10.1.

Устраненные уязвимости2

CVE-2023-25399

Средний 5.5

Дата публикации: 05.07.2023

A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly.

CVSS 3.1

Средний 5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Ссылки

CVE-2023-25399 https://nvd.nist.gov/vuln/detail/CVE-2023-25399

Ссылки1

ALT-PU-2024-9087 https://errata.altlinux.org/ALT-PU-2024-9087

Связанные уязвимости

SUSE-SU-2023:3272-1

suse-cvrf

около 3 лет назад

Security update for python-scipy

SUSE-SU-2023:2970-1

suse-cvrf

больше 3 лет назад

Security update for python-scipy

ROS-20240917-02

CVSS3: 9.8

redos

около 2 лет назад

Множественные уязвимости python3-scipy

ALT-PU-2023-8424

CVSS3: 9.8

altlinux

больше 2 лет назад

ALT-PU-2023-8424: package `python3-module-scipy` update to version 1.10.0-alt1

CVE-2023-29824

CVSS3: 9.8

ubuntu

больше 3 лет назад

A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.