Bug 832736 (CVE-2021-41495)

Summary:	<dev-python/numpy-1.22.2: null pointer dereference
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	minor	CC:	python, sci
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/numpy/numpy/issues/19038
Whiteboard:	B3 [glsa?]
Package list:		Runtime testing required:	---
Bug Depends on:	832750
Bug Blocks:

Description John Helmert III archtester

2022-02-05 04:08:50 UTC

https://github.com/advisories/GHSA-5545-2q6w-2gh6

"Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays."

Already bumped, so please stabilize when ready.

Comment 1 John Helmert III archtester

2022-10-25 21:32:53 UTC

Please cleanup

Comment 2 John Helmert III archtester

2022-10-25 21:33:59 UTC

Ah, sorry already done.