AlmaLinux 8 : python38:3.8 and python38-devel:3.8 (ALSA-2023:3781)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3781 advisory. python: urllib.parse url blocklisting bypass CVE-2023-24329 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. No...

RHEL 8 : python27:2.7 (RHSA-2023:3780)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3780 advisory. Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types...

Malicious code in numpy-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b444962332036ed34a6122ae3f4595e0b05e8a2d1391aa9f7a1b06b9ab639114 The OpenSSF Package Analysis project identified 'numpy-req' @ 12.17.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1381 Malicious code in numpy-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b444962332036ed34a6122ae3f4595e0b05e8a2d1391aa9f7a1b06b9ab639114 The OpenSSF Package Analysis project identified 'numpy-req' @ 12.17.3 pypi as malicious. It is considered malicious because: - The package...

python3.11-numpy bug fix and enhancement update

An update is available for python3.11-numpy. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1384 Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in beautifulsoup-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 199bccf9ed40ab3dcd67c494f1b1b52cd3fa78beed3bc25e851cb0f14db9b60b The OpenSSF Package Analysis project identified 'beautifulsoup-numpy' @ 10.13.10 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1356 Malicious code in beautifulsoup-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 199bccf9ed40ab3dcd67c494f1b1b52cd3fa78beed3bc25e851cb0f14db9b60b The OpenSSF Package Analysis project identified 'beautifulsoup-numpy' @ 10.13.10 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1382 Malicious code in numpy-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc92a371c845859241fd20b897b00c4b6c39fcc8ec83dfe9fbb0146c36d267c5 The OpenSSF Package Analysis project identified 'numpy-selenium' @ 5.20.19 pypi as malicious. It is considered malicious because: - The package...

Malicious code in numpy-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc92a371c845859241fd20b897b00c4b6c39fcc8ec83dfe9fbb0146c36d267c5 The OpenSSF Package Analysis project identified 'numpy-selenium' @ 5.20.19 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pandas-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad64cd7fe8db5e273a5e994ca67fcc44546298765caf11ec2edcd0d587481434 The OpenSSF Package Analysis project identified 'pandas-numpy' @ 8.19.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1385 Malicious code in pandas-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad64cd7fe8db5e273a5e994ca67fcc44546298765caf11ec2edcd0d587481434 The OpenSSF Package Analysis project identified 'pandas-numpy' @ 8.19.3 pypi as malicious. It is considered malicious because: - The package...

Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities

Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pak for Security...

Huawei EulerOS: Security Advisory for numpy (EulerOS-SA-2023-1720)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : numpy (EulerOS-SA-2023-1720)

According to the versions of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Null Pointer Dereference vulnerability exists in numpy.sort in NumPy and 1.19 in the PyArrayDescrNew function due to missing...

Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in NumPy (CVE-2021-34141)

Summary A denial of service vulnerability in NumPy used byIBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2021-34141 DESCRIPTION: NumPy is vulnerable to a denial of service, caused by incomplete string comparison in the numpy.core component. By sending a...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41884)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41884 advisory. - TensorFlow is an open source platform for machine learning. If a numpy array is created with a shape suc...

SUSE CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

SUSE CVE-2019-6446

An issue was discovered in NumPy before 1.16.3. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is a behavior that might have...