-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2021-0d4b58060d 2021-12-18 01:21:16.715285 --------------------------------------------------------------------------------
Name : lapack Product : Fedora 35 Version : 3.10.0 Release : 4.fc35 URL : http://www.netlib.org/lapack/ Summary : Numerical linear algebra package libraries Description : LAPACK (Linear Algebra PACKage) is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizations (LU, Cholesky, QR, SVD, Schur, and generalized Schur) and related computations (i.e., reordering of Schur factorizations and estimating condition numbers) are also included. LAPACK can handle dense and banded matrices, but not general sparse matrices. Similar functionality is provided for real and complex matrices in both single and double precision. LAPACK is coded in Fortran90 and built with gcc.
-------------------------------------------------------------------------------- Update Information:
Fix out of bounds read issue in *larrv functions (CVE-2021-4048) -------------------------------------------------------------------------------- ChangeLog:
* Wed Dec 8 2021 Tom Callaway spot@fedoraproject.org - 3.10.0-4 - Fix out of bounds read in *larrv, CVE-2021-4048 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2024358 - CVE-2021-4048 lapack: Out-of-bounds read in *larrv https://bugzilla.redhat.com/show_bug.cgi?id=2024358 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-0d4b58060d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------