tocsin

PyPI/pyarrow CVE-2019-12410: unknown, EPSS 4.61%

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data

Action: Upgrade pyarrow to 0.15.0 or later.

pip install pyarrow==0.15.0

Affected

introducedfixedlast affected
0.12.00.15.0-

Fixed versions

0.15.0

Sources

CVE-2019-12410 · published · modified · JSON