Stay Secure with the Latest Linux Advisories

security advisoryarbitrary code executionpython package

Mageia: 2019-0322 Critical Python-Numpy Update for Remote Code Execution

Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call . MGASA-2019-0322 - Updated python-numpy packages fix security vulnerability Publication date: 14 Nov 2019 URL: https://advisories.mageia.org/MGASA-2019-0322.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-6446 Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call (CVE-2019-6446). References: - https://bugs.mageia.org/show_bug.cgi?id=24356 - https://access.redhat.com/errata/RHSA-2019:3704 - https://www.cve.org/CVERecord?id=CVE-2019-6446 SRPMS: - 7/core/python-numpy-1.16.3-1.mga7 . Recent updates to the python-numpy packages fix a significant security vulnerability that could enable remote code execution. Find out more details here.. python numpy, security patch, remote execution risk, Mageia update. . Severity: Critical. LinuxSecurity.com Team

Nov 14, 2019 •Critical Mageia