Red Hat Security Advisory

RHSA-2022:7639

openblas security update

Released 2022-11-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) openblas-Rblas-0.3.15-4.el8, openblas-devel-0.3.15-4.el8, openblas-openmp-0.3.15-4.el8 +7
Red Hat Enterprise Linux AppStream (v. 8) openblas-0.3.15-4.el8, openblas-threads-0.3.15-4.el8

Fixes 1 record

TI-2021-02935 CVE-2021-4048 · GHSA-wgf2-cvhg-c384

Out-of-bounds read in lapack

MEDIUM 44

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02763 Published 2021-12-08 Partial fix CWE-125