Lucene search

K
osvGoogleOSV:RLSA-2019:3704
HistoryNov 05, 2019 - 8:53 p.m.

Moderate: numpy security update

2019-11-0520:53:10
Google
osv.dev
9

9.7 High

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.5%

The numpy packages provide NumPY. NumPY is an extension to the Python programming language, which adds support for large, multi-dimensional arrays and matrices, and a library of mathematical functions that operate on such arrays.

Security Fix(es):

  • numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.