Security update for python-numpy SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2793-1 Final 1 1 2022-08-12T08:31:04Z current 2022-08-12T08:31:04Z 2022-08-12T08:31:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python-numpy This update for python-numpy fixes the following issues: - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-2793,SUSE-SLE-Module-HPC-12-2022-2793 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222793-1/ Link for SUSE-SU-2022:2793-1 https://lists.suse.com/pipermail/sle-security-updates/2022-August/011905.html E-Mail link for SUSE-SU-2022:2793-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1193911 SUSE Bug 1193911 https://www.suse.com/security/cve/CVE-2021-41495/ SUSE CVE CVE-2021-41495 page SUSE Linux Enterprise Module for HPC 12 python-numpy_1_13_3-gnu-hpc-1.13.3-4.15.1 python-numpy_1_13_3-gnu-hpc-devel-1.13.3-4.15.1 python2-numpy-gnu-hpc-1.13.3-4.15.1 python2-numpy-gnu-hpc-devel-1.13.3-4.15.1 python3-numpy-gnu-hpc-1.13.3-4.15.1 python3-numpy-gnu-hpc-devel-1.13.3-4.15.1 python3-numpy_1_13_3-gnu-hpc-1.13.3-4.15.1 python3-numpy_1_13_3-gnu-hpc-devel-1.13.3-4.15.1 python-numpy_1_13_3-gnu-hpc-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python-numpy_1_13_3-gnu-hpc-devel-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python2-numpy-gnu-hpc-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python2-numpy-gnu-hpc-devel-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python3-numpy-gnu-hpc-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python3-numpy-gnu-hpc-devel-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python3-numpy_1_13_3-gnu-hpc-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 python3-numpy_1_13_3-gnu-hpc-devel-1.13.3-4.15.1 as a component of SUSE Linux Enterprise Module for HPC 12 ** DISPUTED ** Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place. CVE-2021-41495 SUSE Linux Enterprise Module for HPC 12:python-numpy_1_13_3-gnu-hpc-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python-numpy_1_13_3-gnu-hpc-devel-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python2-numpy-gnu-hpc-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python2-numpy-gnu-hpc-devel-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python3-numpy-gnu-hpc-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python3-numpy-gnu-hpc-devel-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python3-numpy_1_13_3-gnu-hpc-1.13.3-4.15.1 SUSE Linux Enterprise Module for HPC 12:python3-numpy_1_13_3-gnu-hpc-devel-1.13.3-4.15.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222793-1/ https://www.suse.com/security/cve/CVE-2021-41495.html CVE-2021-41495 https://bugzilla.suse.com/1193911 SUSE Bug 1193911