Ubuntu 20.04: 2021-bcd7e12345 Moderate: libgmp Buffer Overflow

LAPACK (Linear Algebra PACKage) is a standard library for numerical

linear algebra. LAPACK provides routines for solving systems of

simultaneous linear equations, least-squares solutions of linear

systems of equations, eigenvalue problems, and singular value

problems. Associated matrix factorizations (LU, Cholesky, QR, SVD,

Schur, and generalized Schur) and related computations (i.e.,

reordering of Schur factorizations and estimating condition numbers)

are also included. LAPACK can handle dense and banded matrices, but

not general sparse matrices. Similar functionality is provided for

real and complex matrices in both single and double precision. LAPACK

is coded in Fortran90 and built with gcc.

Fix out of bounds read issue in *larrv functions (CVE-2021-4048)

* Thu Dec 9 2021 Tom Callaway - 3.9.0-7

- Fix out of bounds read in *larrv, CVE-2021-4048

[ 1 ] Bug #2024358 - CVE-2021-4048 lapack: Out-of-bounds read in *larrv

https://bugzilla.redhat.com/show_bug.cgi?id=2024358

su -c 'dnf upgrade --advisory FEDORA-2021-aec9d01057' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure