tocsin

PyPI/pyarrow CVE-2019-12408: high 7.5, EPSS 3.23%

It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null va

Action: Upgrade pyarrow to 0.15.0 or later.

pip install pyarrow==0.15.0

Affected

introducedfixedlast affected
0.14.00.15.0-

Fixed versions

0.15.0

Sources

CVE-2019-12408 · published · modified · JSON