OpenBLAS Security Update
Summary
ALSA-2022:7639: Moderate: openblas security update. Affects openblas versions < 0.3.15-4.el8. Fixed in 0.3.15-4.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version. It provides a set of mathematical functions for linear algebra operations. OpenBLAS is widely used in scientific computing and numerical analysis applications.
Vulnerability Detail
The security update addresses an out-of-bounds read vulnerability in the lapack component of OpenBLAS. This vulnerability, identified as CVE-2021-4048, could potentially be exploited by an attacker to read sensitive information or cause a denial of service. The impact of this vulnerability depends on the context in which OpenBLAS is used.
How To Fix
Minimum fixed version
0.3.15-4.el8
This is the first release that contains the fix.
sudo dnf update openblasTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update to ensure the integrity and security of the OpenBLAS library.
Conclusion
The OpenBLAS security update addresses an out-of-bounds read vulnerability in the lapack component. It is recommended to update the OpenBLAS package to version 0.3.15-4.el8 or later to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for openblas →
FAQ
OpenBLAS is an optimized BLAS library used for mathematical computations in scientific computing and numerical analysis applications.
The vulnerability could allow an attacker to read sensitive information or cause a denial of service, depending on the context in which OpenBLAS is used.
To fix the vulnerability, update the OpenBLAS package to version 0.3.15-4.el8 or later.
No, there is no known workaround for this vulnerability. It is crucial to apply the security update.
You can find more information about the vulnerability in the CVE page linked in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for openblas.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
