[SECURITY] Fedora 33 Update: python-mpmath-1.1.0-13.fc33
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-fc30c0de34
2021-10-07 17:07:48.980777
--------------------------------------------------------------------------------
Name : python-mpmath
Product : Fedora 33
Version : 1.1.0
Release : 13.fc33
URL : http://mpmath.org
Summary : A pure Python library for multiprecision floating-point arithmetic
Description :
Mpmath is a pure-Python library for multiprecision floating-point arithmetic.
It provides an extensive set of transcendental functions, unlimited exponent
sizes, complex numbers, interval arithmetic, numerical integration and
differentiation, root-finding, linear algebra, and much more. Almost any
calculation can be performed just as well at 10-digit or 1000-digit precision,
and in many cases mpmath implements asymptotically fast algorithms that scale
well for extremely high precision work. If available, mpmath will (optionally)
use gmpy to speed up high precision operations.
--------------------------------------------------------------------------------
Update Information:
Fix CVE.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 29 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> 1.1.0-13
- Fix CVE-2021-29063 regular expression denial of service (#1974835)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1974835 - CVE-2021-29063 python-mpmath: Regular expression denial of service
in the mpmathify function [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1974835
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-fc30c0de34' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------