scikit-learn: Denial of Service

Background

scikit-learn is a machine learning library for Python.

Description

When supplied with a crafted model SVM, predict() can result in a null pointer dereference.

Impact

An attcker capable of providing a crafted model to scikit-learn can result in denial of service.

Workaround

There is no known workaround at this time.

Resolution

All scikit-learn users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sci-libs/scikit-learn-1.1.1"