Stay Secure with the Latest Linux Advisories

security advisorymoderateRed Hat

Red Hat: RHSA-2022:7639-01 Moderate: OpenBLAS Out-Of-Bounds Read

An update for openblas is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openblas security update Advisory ID: RHSA-2022:7639-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:7639 Issue date: 2022-11-08 CVE Names: CVE-2021-4048 ==================================================================== 1. Summary: An update for openblas is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version. Security Fix(es): * lapack: Out-of-bounds read in *larrv (CVE-2021-4048) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2024358 - CVE-2021-4048 lapack: Out-of-bounds read in *larrv 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: openblas-0.3.15-4.el8.src.rpm aarch64: openblas-0.3.15-4.el8.aarch64.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-debugsource-0.3.15-4.el8.aarch64.rpm openblas-openmp-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-serial64-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-threads-0.3.15-4.el8.aarch64.rpm openblas-threads-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-threads64-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.aarch64.rpm ppc64le: openblas-0.3.15-4.el8.ppc64le.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-debugsource-0.3.15-4.el8.ppc64le.rpm openblas-openmp-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-serial64-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-threads-0.3.15-4.el8.ppc64le.rpm openblas-threads-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-threads64-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.ppc64le.rpm s390x: openblas-0.3.15-4.el8.s390x.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.s390x.rpm openblas-debuginfo-0.3.15-4.el8.s390x.rpm openblas-debugsource-0.3.15-4.el8.s390x.rpm openblas-openmp-debuginfo-0.3.15-4.el8.s390x.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.s390x.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.s390x.rpm openblas-serial64-debuginfo-0.3.15-4.el8.s390x.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.s390x.rpm openblas-threads-0.3.15-4.el8.s390x.rpm openblas-threads-debuginfo-0.3.15-4.el8.s390x.rpm openblas-threads64-debuginfo-0.3.15-4.el8.s390x.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.s390x.rpm x86_64: openblas-0.3.15-4.el8.i686.rpm openblas-0.3.15-4.el8.x86_64.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.i686.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-debuginfo-0.3.15-4.el8.i686.rpm openblas-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-debugsource-0.3.15-4.el8.i686.rpm openblas-debugsource-0.3.15-4.el8.x86_64.rpm openblas-openmp-debuginfo-0.3.15-4.el8.i686.rpm openblas-openmp-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-serial64-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-threads-0.3.15-4.el8.i686.rpm openblas-threads-0.3.15-4.el8.x86_64.rpm openblas-threads-debuginfo-0.3.15-4.el8.i686.rpm openblas-threads-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-threads64-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v.8): aarch64: openblas-Rblas-0.3.15-4.el8.aarch64.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-debugsource-0.3.15-4.el8.aarch64.rpm openblas-devel-0.3.15-4.el8.aarch64.rpm openblas-openmp-0.3.15-4.el8.aarch64.rpm openblas-openmp-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-openmp64-0.3.15-4.el8.aarch64.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-openmp64_-0.3.15-4.el8.aarch64.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-serial64-0.3.15-4.el8.aarch64.rpm openblas-serial64-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-serial64_-0.3.15-4.el8.aarch64.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-static-0.3.15-4.el8.aarch64.rpm openblas-threads-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-threads64-0.3.15-4.el8.aarch64.rpm openblas-threads64-debuginfo-0.3.15-4.el8.aarch64.rpm openblas-threads64_-0.3.15-4.el8.aarch64.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.aarch64.rpm ppc64le: openblas-Rblas-0.3.15-4.el8.ppc64le.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-debugsource-0.3.15-4.el8.ppc64le.rpm openblas-devel-0.3.15-4.el8.ppc64le.rpm openblas-openmp-0.3.15-4.el8.ppc64le.rpm openblas-openmp-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-openmp64-0.3.15-4.el8.ppc64le.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-openmp64_-0.3.15-4.el8.ppc64le.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-serial64-0.3.15-4.el8.ppc64le.rpm openblas-serial64-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-serial64_-0.3.15-4.el8.ppc64le.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-static-0.3.15-4.el8.ppc64le.rpm openblas-threads-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-threads64-0.3.15-4.el8.ppc64le.rpm openblas-threads64-debuginfo-0.3.15-4.el8.ppc64le.rpm openblas-threads64_-0.3.15-4.el8.ppc64le.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.ppc64le.rpm s390x: openblas-Rblas-0.3.15-4.el8.s390x.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.s390x.rpm openblas-debuginfo-0.3.15-4.el8.s390x.rpm openblas-debugsource-0.3.15-4.el8.s390x.rpm openblas-devel-0.3.15-4.el8.s390x.rpm openblas-openmp-0.3.15-4.el8.s390x.rpm openblas-openmp-debuginfo-0.3.15-4.el8.s390x.rpm openblas-openmp64-0.3.15-4.el8.s390x.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.s390x.rpm openblas-openmp64_-0.3.15-4.el8.s390x.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.s390x.rpm openblas-serial64-0.3.15-4.el8.s390x.rpm openblas-serial64-debuginfo-0.3.15-4.el8.s390x.rpm openblas-serial64_-0.3.15-4.el8.s390x.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.s390x.rpm openblas-static-0.3.15-4.el8.s390x.rpm openblas-threads-debuginfo-0.3.15-4.el8.s390x.rpm openblas-threads64-0.3.15-4.el8.s390x.rpm openblas-threads64-debuginfo-0.3.15-4.el8.s390x.rpm openblas-threads64_-0.3.15-4.el8.s390x.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.s390x.rpm x86_64: openblas-Rblas-0.3.15-4.el8.x86_64.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.i686.rpm openblas-Rblas-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-debuginfo-0.3.15-4.el8.i686.rpm openblas-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-debugsource-0.3.15-4.el8.i686.rpm openblas-debugsource-0.3.15-4.el8.x86_64.rpm openblas-devel-0.3.15-4.el8.i686.rpm openblas-devel-0.3.15-4.el8.x86_64.rpm openblas-openmp-0.3.15-4.el8.i686.rpm openblas-openmp-0.3.15-4.el8.x86_64.rpm openblas-openmp-debuginfo-0.3.15-4.el8.i686.rpm openblas-openmp-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-openmp64-0.3.15-4.el8.x86_64.rpm openblas-openmp64-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-openmp64_-0.3.15-4.el8.x86_64.rpm openblas-openmp64_-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-serial64-0.3.15-4.el8.x86_64.rpm openblas-serial64-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-serial64_-0.3.15-4.el8.x86_64.rpm openblas-serial64_-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-static-0.3.15-4.el8.i686.rpm openblas-static-0.3.15-4.el8.x86_64.rpm openblas-threads-debuginfo-0.3.15-4.el8.i686.rpm openblas-threads-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-threads64-0.3.15-4.el8.x86_64.rpm openblas-threads64-debuginfo-0.3.15-4.el8.x86_64.rpm openblas-threads64_-0.3.15-4.el8.x86_64.rpm openblas-threads64_-debuginfo-0.3.15-4.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-4048 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.7_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY2pSKtzjgjWX9erEAQgiMhAAl4JqXY+OnFt0obGf6iXR2CYomEML5OfF WjzkLX++0G5wk19eJZcM3Vn4zdW3RO9g0QIL3k8J7xfdykXHA0S9L7SVbnzNAt4k YUo3V9plKxz5qNejv5uttVauSr9J6e+j36upEplKzdcydp4tjly9Re1QTztWuDUb pPlFmt+1SEgNvS0mxwlTK4s6ZmOO6e/mv3h0E724uI4DBJhdIT6HjdYg8StYa+g/ d2d3xzt+ejOHiE3hTkoxg4dRu0WMGU8DTd4ZK0cC3WkM1Uc4IOIU1FHF2gzSeH7y Kgczo8OIoO6RBSi855meB834510Kx9R99h2l7nhWW/JgMrPu3pU/BIOyMXPgElv4 x5GanoLYUi06t4NBRvRSgPzjvFDXep7jk6uXddwiVvynBFwzO9PDLZ6wdlniCpMU CTmTupjxEmV+wHjA+9jKnyaJapjuFIBoBTqQUK6UeZe9QJ/GbX7HeFgVaaxYjRWe FvskdBD+yfukz8bx5ixDuYMXvvcuNxJ9WXj6QGjobEL3/NIzO6QaQIOo9Vy3/1C1 +Q/p4TRVwuaBembRiGnYeR06kcuka+I6ezrqQNj2JH++k1+3s5gHUHyChaxZ7+bs Q3UQqbea3aMelxNg0a276+p7NY0bk7ukDsOT6vE+s91Vhm8NMz5jwQuofIoj6T9S Csv5Xhsyfy4=xEEC -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . An important patch has been issued for OpenBLAS on Red Hat Enterprise Linux. This update resolves a vulnerability related to out-of-bounds memory access.. OpenBLAS Security Update, Red Hat Enterprise Linux, Moderate Threat Advisory. . LinuxSecurity.com Team

Nov 08, 2022 Red Hat