[CLSA-2026:1790332295] Fix CVE(s): CVE-2021-4048
Type:
security
Severity:
Critical
Release date:
2026-09-25 10:31:48 UTC
Description:
* SECURITY UPDATE: Out-of-bounds read in the MRRR eigenvector routines - debian/patches/CVE-2021-4048.patch: return early from clarrv, dlarrv, slarrv and zlarrv when M is zero, so the routines no longer read out-of-bounds entries of IBLOCK and the work array - CVE-2021-4048
CVEs fixed:
Updated packages:
  • libblas-dev_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:c2127053846d4487b6648e44a61e2d1e45e8e57c
  • libblas-test_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:cb9075f910d1999e9528469ef809b3e393f6a3d8
  • libblas3_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:80253c2b2b21888260651e6827719781cb8f59b7
  • liblapack-dev_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:117f3f2d8b1e0c21ae3e1f6c8ba5d3a1a314cce2
  • liblapack-doc_3.7.1-4ubuntu1+tuxcare.els1_all.deb
    sha:ec6ea7d71b56fc72a4812e9b535d391c999968b9
  • liblapack-doc-man_3.7.1-4ubuntu1+tuxcare.els1_all.deb
    sha:b3ce6b02e72e0f16147345ab9f6ed2e2d97bae8b
  • liblapack-pic_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:bbcc0eb286e766f2f30d95a406f38c8bca67d1ed
  • liblapack-test_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:5c78ea0767096146e667bc2628fe92b33a1e47eb
  • liblapack3_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:e4e11505a9fab5b2b0e2b22bf921046f1ebbd205
  • liblapacke_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:a66e9ce77fe30c31d2d318c7cad0987a8dc156ba
  • liblapacke-dev_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:c4d4663662a9a224e2cd6a10712c87e9c50b48bf
  • libtmglib-dev_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:89f55386b4c41e2b13a14aa28bfc3f8820757c79
  • libtmglib3_3.7.1-4ubuntu1+tuxcare.els1_amd64.deb
    sha:101e94c7aa4ad1ae13571a3830353e807922bbf8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.