Linux · Security advisory · November 15, 2022

ELSA-2022-7639: Security update for 12 packages

ELSA-2022-7639, released November 15, 2022, fixes 1 CVE across 12 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0276
86th percentile

Fixed package versions

ProductReleaseFixed in
openblasol 80:0.3.15-4.el8
openblas-Rblasol 80:0.3.15-4.el8
openblas-develol 80:0.3.15-4.el8
openblas-openmpol 80:0.3.15-4.el8
openblas-openmp64ol 80:0.3.15-4.el8
openblas-openmp64_ol 80:0.3.15-4.el8
openblas-serial64ol 80:0.3.15-4.el8
openblas-serial64_ol 80:0.3.15-4.el8
openblas-staticol 80:0.3.15-4.el8
openblas-threadsol 80:0.3.15-4.el8
openblas-threads64ol 80:0.3.15-4.el8
openblas-threads64_ol 80:0.3.15-4.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-4048 openblas-static: OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version. Security Fix(es): * lapack: Out-of-bound... 9.1 0.0276 None reported
Showing 1 to 1 of 1 1