{"id":"CVE-2021-4048","aliases":["ALSA-2022:7639","AZL-6609","AZL-7315","BIT-openblas-2021-4048","CLSA-2026-1784622156","CLSA-2026-1790332295","DEBIAN-CVE-2021-4048","EUVD-2021-33945","GHSA-wgf2-cvhg-c384","JLSEC-2025-6","MGASA-2021-0586","OESA-2021-1471","OESA-2021-1478","OESA-2022-1947","RHSA-2022:7639","RLSA-2022:7639","SUSE-SU-2022:0913-1","SUSE-SU-2022:0915-1","UBUNTU-CVE-2021-4048","openSUSE-SU-2022:0915-1","openSUSE-SU-2024:11704-1"],"status":"published","title":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02763,"percentile":0.86388,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2021-12-08T21:24:42Z","modified":"2026-10-29T11:01:38Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"openblas","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-Rblas","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-devel","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-openmp","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-openmp64","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-openmp64_","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-serial64","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-serial64_","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-static","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-threads","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-threads64","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openblas-threads64_","fixed_in":["0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"lapack","fixed_in":["3.10.0-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openblas","fixed_in":["0.3.21-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openblas","fixed_in":["0.3.18"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas-devel","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas-static","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas64","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas64_","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack-devel","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack-static","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack64","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack64_","fixed_in":["3.9.0-8.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libblas-dev","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libblas-test","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libblas3","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-dev","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-doc","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-doc-man","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-pic","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-test","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack3","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapacke","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapacke-dev","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtmglib-dev","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libtmglib3","fixed_in":["3.7.1-4ubuntu1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"lapack","fixed_in":["3.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lapack","fixed_in":["3.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lapack","fixed_in":["3.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openblas","fixed_in":["0.3.18+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openblas","fixed_in":["0.3.18+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openblas","fixed_in":["0.3.18+ds-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LAPACK32_jll","fixed_in":["3.10.1+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"LAPACK_jll","fixed_in":["3.10.1+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"MadNLP","fixed_in":["0.2.0"],"sources":["osv"]},{"ecosystem":"Julia","package":"MadNLPHSL","fixed_in":["0.4.0"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenBLAS32_jll","fixed_in":["0.3.20+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenBLAS_jll","fixed_in":["0.3.20+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"libjulia_jll","fixed_in":["1.8.0+1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"lapack","fixed_in":["3.9.0-3.1.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"openblas","fixed_in":["0.3.12-4.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"lapack","fixed_in":["3.9.0-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"lapack","fixed_in":["3.9.0-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openblas","fixed_in":["0.3.10-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"openblas","fixed_in":["0.3.10-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"lapack","fixed_in":["3.9.0-6.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-Rblas-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-debugsource","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-openmp-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-openmp64-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-openmp64_-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-serial64-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-serial64_-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads64-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads64_-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-Rblas","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-Rblas-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-debugsource","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-devel","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64_","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64_-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64_","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64_-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-static","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64_","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64_-debuginfo","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"openblas","fixed_in":["0:0.3.15-4.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"lapack","fixed_in":["3.5.0-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"lapack","fixed_in":["3.5.0-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"lapack","fixed_in":["3.5.0-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"lapack","fixed_in":["3.5.0-4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"lapack","fixed_in":["3.5.0-4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"lapack","fixed_in":["3.5.0-4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"lapack","fixed_in":["3.5.0-4.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"lapack-man","fixed_in":["3.5.0-4.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-Rblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-openmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-openmp64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-openmp64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-serial64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-serial64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-threads64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openblas-threads64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.21-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openblas","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.18"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"blas64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"lapack64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-8.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libblas-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libblas-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libblas3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-doc-man","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-pic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapack3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapacke","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"liblapacke-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtmglib-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libtmglib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-4ubuntu1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.18+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.18+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.18+ds-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"LAPACK32_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.1+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"LAPACK_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.10.1+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"MadNLP","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.2.0"}]}]},{"source":"osv","ecosystem":"Julia","package":"MadNLPHSL","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.4.0"}]}]},{"source":"osv","ecosystem":"Julia","package":"MadNLPPardiso","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Julia","package":"OpenBLAS32_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.20+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"OpenBLASHighCoreCount_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"Julia","package":"OpenBLAS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.20+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"libjulia_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0+1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-3.1.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.12-4.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.10-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.10-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.0-6.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-Rblas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-openmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-openmp64-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-openmp64_-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-serial64-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-serial64_-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads64-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"openblas-threads64_-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-Rblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-Rblas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-openmp64_-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-serial64_-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64_","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openblas-threads64_-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.15-4.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-4.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.2.8-2","0.2.8-3","0.2.8-4","0.2.8-6","0.2.8-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.2.14-1ubuntu1","0.2.15-1","0.2.15-1build1","0.2.18-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.7.1-3ubuntu2","3.7.1-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.2.20+ds-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8.0-2","3.8.0-8ubuntu1","3.9.0-1","3.9.0-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openblas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.7+ds-1","0.3.7+ds-7","0.3.8+ds-1","0.3.8+ds-1ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"lapack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-4.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"lapack-man","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0-4.6.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"julialang","product":"julia"},{"vendor":"lapack_project","product":"lapack"},{"vendor":"microsoft","product":"lapack"},{"vendor":"openblas_project","product":"openblas"},{"vendor":"redhat","product":"ceph_storage"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift_container_storage"},{"vendor":"redhat","product":"openshift_data_foundation"}],"references":[{"url":"https://github.com/Reference-LAPACK/lapack/pull/625","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/JuliaLang/julia/issues/42415","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/xianyi/OpenBLAS/commit/337b65133df174796794871b3988cd03426e6d41","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/xianyi/OpenBLAS/commit/2be5ee3cca97a597f2ee2118808a2d5eacea050c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/xianyi/OpenBLAS/commit/fe497efa0510466fd93578aaf9da1ad8ed4edbe7","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://github.com/xianyi/OpenBLAS/commit/ddb0ff5353637bb5f5ad060c9620e334c143e3d7","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4048","tags":["web","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024358","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/"},{"url":"https://github.com/advisories/GHSA-wgf2-cvhg-c384"},{"url":"https://access.redhat.com/errata/RHSA-2022:7639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4048","tags":["report"]},{"url":"https://bugzilla.redhat.com/2024358","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7639.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1784622156.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1790332295.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4048","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0586.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29788","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1471","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1478","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1947","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7639.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4048","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7639","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220913-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193562","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4048","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220915-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4048","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6Y4WJU3KSP5LSKZL7KZ3ZTSCG3EWFTGE/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-4048","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T21:24:42Z","modified":"2024-08-03T17:16:03.57Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:07.697752Z"}],"euvd":[{"id":"EUVD-2021-33945","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T21:24:42Z","modified":"2024-08-03T17:16:03Z","updated_at":"2026-11-03T03:25:10.888157Z"}],"ghsa":[{"id":"GHSA-wgf2-cvhg-c384","title":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-09T00:00:14Z","modified":"2023-02-01T05:06:47Z","cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:25.046492Z"}],"nvd":[{"id":"CVE-2021-4048","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T22:15:10.22Z","modified":"2026-06-17T04:18:57.257Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:02.189991Z"}],"osv":[{"id":"AZL-6609","title":"CVE-2021-4048 affecting package lapack for versions less than 3.10.0-6","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T22:15:10Z","modified":"2026-04-21T04:37:46.636812Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-7315","title":"CVE-2021-4048 affecting package openblas for versions less than 0.3.21-1","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T22:15:10Z","modified":"2026-04-21T04:33:49.478525Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CVE-2021-4048","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T22:15:10.22Z","modified":"2026-10-20T10:55:29.80573385Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-4048","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T22:15:10.22Z","modified":"2026-10-23T18:03:33.76280765Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"JLSEC-2025-6","title":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack...","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2025-10-08T17:41:37.19Z","modified":"2026-08-03T13:30:04.102118743Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2021-1471","title":"lapack security update","description":"The LAPACK libraries for numerical linear algebra.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.(CVE-2021-4048)","status":"published","published":"2021-12-24T11:04:44Z","modified":"2026-08-18T01:16:13.51332895Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2021-1478","title":"openblas security update","description":"An optimized BLAS library based on GotoBLAS2 1.13 BSD version.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.(CVE-2021-4048)","status":"published","published":"2021-12-31T11:04:45Z","modified":"2026-08-18T01:16:16.804500331Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"OESA-2022-1947","title":"lapack security update","description":"LAPACK (Linear Algebra PACKage) is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizations (LU, Cholesky, QR, SVD,Schur, and generalized Schur) and related computations (i.e.,reordering of Schur factorizations and estimating condition numbers)are also included. LAPACK can handle dense and banded matrices, but not general sparse matrices. Similar functionality is provided for real and complex matrices in both single and double precision. LAPACK is coded in Fortran90 and built with gcc.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.(CVE-2021-4048)","status":"published","published":"2022-09-23T11:05:15Z","modified":"2026-08-18T01:17:18.528698827Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7639","title":"Red Hat Security Advisory: openblas security update","status":"published","published":"2024-09-16T08:41:38Z","modified":"2026-06-26T12:22:18.82238543Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7639","title":"Moderate: openblas security update","description":"OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.\n\nSecurity Fix(es):\n\n* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:25:15Z","modified":"2026-02-05T07:00:10.217323Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-4048","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2021-12-08T22:15:00Z","modified":"2026-04-22T13:00:03.549829Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2022:7639","title":"Moderate: openblas security update","description":"OpenBLAS is an optimized BLAS library based on GotoBLAS2 1.13 BSD version.\n\nSecurity Fix(es):\n\n* lapack: Out-of-bounds read in *larrv (CVE-2021-4048)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:38.005252766Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-openblas-2021-4048","description":"An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.","status":"published","published":"2024-03-06T10:59:09.58Z","modified":"2026-09-08T08:48:16.718405312Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2026-1784622156","title":"lapack: Fix of CVE-2021-4048","description":"- CVE-2021-4048: fix out of bounds read in larrv functions\n- Pull runtime 64-bit-index subpackages into -devel via Requires so devel-shipped\n  liblapack64/libblas64/libcblas64 .so symlinks resolve on install","status":"published","published":"2026-07-21T08:23:01Z","modified":"2026-10-26T09:30:14.196839758Z","updated_at":"2026-11-02T15:43:46.482572Z"},{"id":"CLSA-2026-1790332295","title":"Fix CVE(s): CVE-2021-4048","description":"   * SECURITY UPDATE: Out-of-bounds read in the MRRR eigenvector routines\n     - debian/patches/CVE-2021-4048.patch: return early from clarrv, dlarrv,\n       slarrv and zlarrv when M is zero, so the routines no longer read\n       out-of-bounds entries of IBLOCK and the work array\n     - CVE-2021-4048","status":"published","published":"2026-09-25T10:31:48Z","modified":"2026-10-26T09:32:03.872178919Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"MGASA-2021-0586","title":"Updated lapack/openblas packages fix security vulnerability","description":"Fixes out of bounds read issue in *larrv functions (CVE-2021-4048)\n","status":"published","published":"2021-12-26T00:14:13Z","modified":"2026-04-16T04:42:06.307844718Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0915-1","title":"Security update for lapack","description":"This update for lapack fixes the following issues:\n\n- CVE-2021-4048: Fixed an out of bounds read when user input was not validated properly (bsc#1193562).\n","status":"published","published":"2022-03-21T15:51:03Z","modified":"2026-02-04T03:24:32.466996Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11704-1","title":"blas-devel-3.9.0-4.1 on GA media","description":"These are all security issues fixed in the blas-devel-3.9.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:12.801915Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0913-1","title":"Security update for lapack","description":"This update for lapack fixes the following issues:\n\n- CVE-2021-4048: Fixed an out of bounds read when user input was not validated properly (bsc#1193562).\n","status":"published","published":"2022-03-21T15:50:20Z","modified":"2026-02-04T03:15:19.612855Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0915-1","title":"Security update for lapack","description":"This update for lapack fixes the following issues:\n\n- CVE-2021-4048: Fixed an out of bounds read when user input was not validated properly (bsc#1193562).\n","status":"published","published":"2022-03-21T15:50:46Z","modified":"2026-02-04T03:50:37.562896Z","updated_at":"2026-11-02T15:53:50.066806Z"}]}}