—

PYSEC-2023-102

Quick fix

PYSEC-2023-102 — scipy: upgrade to the fixed version with the command below.

pip install --upgrade 'scipy>=1.10.0'

Details

A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.

Are you affected?

Enter the version of the package you're using.

Affected packages

Introduced in: 0Fixed in: 1.10.0

Fixpip install --upgrade 'scipy>=1.10.0'

References

https://github.com/scipy/scipy/issues/16235[EVIDENCE]
https://github.com/scipy/scipy/issues/16235[REPORT]
https://github.com/scipy/scipy/issues/16235[FIX]
https://github.com/scipy/scipy/issues/16235[ADVISORY]
https://github.com/scipy/scipy/pull/16397[FIX]
http://www.square16.org/achievement/cve-2023-25399/[WEB]
https://github.com/advisories/GHSA-9jx5-6pgf-crrp[ADVISORY]