This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-34141 →

DEBIAN-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by construct...

Original description

The description as published by the source.

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 numpy

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 numpy

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 numpy

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org