Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-34141 →

DEBIAN-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by construct...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 numpy

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 numpy

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 numpy

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org