90 lines
2.9 KiB
JSON
90 lines
2.9 KiB
JSON
{
|
|
"Definition": [
|
|
{
|
|
"ID": "oval:org.altlinux.errata:def:20222457",
|
|
"Version": "oval:org.altlinux.errata:def:20222457",
|
|
"Class": "patch",
|
|
"Metadata": {
|
|
"Title": "ALT-PU-2022-2457: package `openblas` update to version 0.3.19-alt1.1",
|
|
"AffectedList": [
|
|
{
|
|
"Family": "unix",
|
|
"Platforms": [
|
|
"ALT Linux branch c10f1"
|
|
],
|
|
"Products": [
|
|
"ALT SP Workstation",
|
|
"ALT SP Server"
|
|
]
|
|
}
|
|
],
|
|
"References": [
|
|
{
|
|
"RefID": "ALT-PU-2022-2457",
|
|
"RefURL": "https://errata.altlinux.org/ALT-PU-2022-2457",
|
|
"Source": "ALTPU"
|
|
},
|
|
{
|
|
"RefID": "CVE-2021-4048",
|
|
"RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2021-4048",
|
|
"Source": "CVE"
|
|
}
|
|
],
|
|
"Description": "This update upgrades openblas to version 0.3.19-alt1.1. \nSecurity Fix(es):\n\n * CVE-2021-4048: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.",
|
|
"Advisory": {
|
|
"From": "errata.altlinux.org",
|
|
"Severity": "Critical",
|
|
"Rights": "Copyright 2024 BaseALT Ltd.",
|
|
"Issued": {
|
|
"Date": "2022-08-18"
|
|
},
|
|
"Updated": {
|
|
"Date": "2022-08-18"
|
|
},
|
|
"BDUs": null,
|
|
"CVEs": [
|
|
{
|
|
"ID": "CVE-2021-4048",
|
|
"CVSS": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
|
|
"CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
|
|
"CWE": "CWE-125",
|
|
"Href": "https://nvd.nist.gov/vuln/detail/CVE-2021-4048",
|
|
"Impact": "Critical",
|
|
"Public": "20211208"
|
|
}
|
|
],
|
|
"AffectedCPEs": {
|
|
"CPEs": [
|
|
"cpe:/o:alt:spworkstation:10",
|
|
"cpe:/o:alt:spserver:10"
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"Criteria": {
|
|
"Operator": "AND",
|
|
"Criterions": [
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:4001",
|
|
"Comment": "ALT Linux must be installed"
|
|
}
|
|
],
|
|
"Criterias": [
|
|
{
|
|
"Operator": "OR",
|
|
"Criterions": [
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20222457001",
|
|
"Comment": "libopenblas is earlier than 0:0.3.19-alt1.1"
|
|
},
|
|
{
|
|
"TestRef": "oval:org.altlinux.errata:tst:20222457002",
|
|
"Comment": "libopenblas-devel is earlier than 0:0.3.19-alt1.1"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
} |