OpenBLAS Bug Fix and Enhancement Update
Summary
ALEA-2021:1777: openblas bug fix and enhancement update. Affects openblas versions < 0.3.12-1.el8. Fixed in 0.3.12-1.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenBLAS is an open-source implementation of the Basic Linear Algebra Subprograms (BLAS) library. It provides optimized mathematical functions for linear algebra operations, such as matrix multiplication and vector operations. OpenBLAS is widely used in scientific computing and machine learning applications. This vulnerability affects the OpenBLAS package in AlmaLinux 8.
Vulnerability Detail
The vulnerability in OpenBLAS has been fixed and enhanced in version 0.3.12-1.el8. The details of the changes can be found in the AlmaLinux Release Notes. This update addresses various bugs and security issues in the OpenBLAS library. These vulnerabilities could potentially be exploited by attackers to execute arbitrary code, cause a denial of service, or leak sensitive information.
How To Fix
Minimum fixed version
0.3.12-1.el8
This is the first release that contains the fix.
sudo dnf update openblasTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The OpenBLAS bug fix and enhancement update addresses various vulnerabilities and bugs in the OpenBLAS library. To ensure the security and stability of your system, it is recommended to update the OpenBLAS package to version 0.3.12-1.el8. If you need further assistance or support in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for openblas →
FAQ
OpenBLAS is an open-source implementation of the Basic Linear Algebra Subprograms (BLAS) library, providing optimized mathematical functions for linear algebra operations.
This vulnerability could allow attackers to execute arbitrary code, cause a denial of service, or leak sensitive information.
You can check the version of the OpenBLAS package installed on your system. If it is older than 0.3.12-1.el8, your system may be vulnerable.
No specific workarounds have been provided for this vulnerability. It is recommended to update the OpenBLAS package to the fixed version.
You can find more information about this vulnerability in the AlmaLinux Release Notes and the advisory on the AlmaLinux OSV Database.
Related vulnerabilities
Recent vulnerabilities recorded for openblas.
