--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-b88139122e
2021-10-07 16:42:04.617733
--------------------------------------------------------------------------------
Name : python-mpmath
Product : Fedora EPEL 7
Version : 1.0.0
Release : 2.el7
URL :
http://mpmath.org
Summary : A pure Python library for multiprecision floating-point arithmetic
Description :
Mpmath is a pure-Python library for multiprecision floating-point arithmetic.
It provides an extensive set of transcendental functions, unlimited exponent
sizes, complex numbers, interval arithmetic, numerical integration and
differentiation, root-finding, linear algebra, and much more. Almost any
calculation can be performed just as well at 10-digit or 1000-digit precision,
and in many cases mpmath implements asymptotically fast algorithms that scale
well for extremely high precision work. If available, mpmath will (optionally)
use gmpy to speed up high precision operations.
If you require plotting capabilities in mpmath, install python-matplotlib.
--------------------------------------------------------------------------------
Update Information:
Fix CVE.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Sep 29 2021 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 1.0.0-2
- Fix CVE-2021-29063 regular expression denial of service (#1974835)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1974836 - CVE-2021-29063 python-mpmath: Regular expression denial of service
in the mpmathify function [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=1974836
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update python-mpmath' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------