Source: libxsmm Version: 1.9-1 Severity: important Tags: patch security upstream Forwarded: https://github.com/hfp/libxsmm/issues/287
Hi, The following vulnerabilities were published for libxsmm. CVE-2018-20541[0]: | There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at | generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different | vulnerability than CVE-2018-20542 (which is in a different part of the | source code and is seen at different addresses). CVE-2018-20542[1]: | There is a heap-based buffer-overflow at generator_spgemm_csc_reader.c | (function libxsmm_sparse_csc_reader) in LIBXSMM 1.10, a different | vulnerability than CVE-2018-20541 (which is in a different part of the | source code and is seen at a different address). If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2018-20541 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20541 [1] https://security-tracker.debian.org/tracker/CVE-2018-20542 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20542 [2] https://github.com/hfp/libxsmm/issues/287 Regards, Salvatore
