Most recent entries from all

ALSA-2022:7639 — Moderate: openblas security update

Affected: AlmaLinux:8: openblas, AlmaLinux:8: openblas-Rblas, AlmaLinux:8: openblas-devel, AlmaLinux:8: openblas-openmp, AlmaLinux:8: openblas-openmp64, AlmaLinux:8: openblas-openmp64_, AlmaLinux:8: openblas-serial64, AlmaLinux:8: openblas-serial64_, AlmaLinux:8: openblas-static, AlmaLinux:8: openblas-threads and 2 more

OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.

Security Fix(es):

* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-03980

BIT-openblas-2021-4048

Affected: Bitnami: openblas

An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.

certfr-2024-avi-0086 — De multiples vulnérabilités ont été découvertes dans Juniper. Elles permettent à un attaquant de provoquer une exécutio…

certfr-2024-avi-0086

EUVD-2026-21255

fkie_cve-2021-4048

GHSA-wgf2-cvhg-c384

gsd-2021-4048

msrc_CVE-2021-4048 — An out-of-bounds read flaw was found in the CLARRV DLARRV SLARRV and ZLARRV functions in lapack through version 3.10.0…

msrc_CVE-2021-4048

OESA-2021-1471 — lapack security update

Affected: openEuler:20.03-LTS-SP1: lapack, openEuler:20.03-LTS-SP2: lapack

The LAPACK libraries for numerical linear algebra. Security Fix(es): An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.(CVE-2021-4048)

openSUSE-SU-2022:0915-1 — Security update for lapack

Security update for lapack

RHSA-2023:6832 — Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.14.0 security, enhancement & bug fix update

lapack: Out-of-bounds read in *larrv golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding hashicorp: html injection into web ui Hashicorp/vault: Vault’s LDAP Auth Method Allows for User Enumeration golang.org/x/net/html: Cross site scripting hashicorp/vault: Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets golang: net/http, net/textproto: denial of service from excessive memory allocation golang: html/template: improper sanitization of CSS values golang: html/template: improper handling of empty HTML attributes goproxy: Denial of service (DoS) via unspecified vectors. golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

SUSE-SU-2022:0913-1 — Security update for lapack

Security update for lapack

UBUNTU-CVE-2021-4048

Affected: Ubuntu:14.04:LTS: openblas, Ubuntu:16.04:LTS: openblas, Ubuntu:18.04:LTS: lapack, Ubuntu:18.04:LTS: openblas, Ubuntu:20.04:LTS: lapack, Ubuntu:20.04:LTS: openblas

WID-SEC-W-2022-2044 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Dateien zu manipulieren, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.