—

PYSEC-2023-124

Quick fix

PYSEC-2023-124 — paddlepaddle: upgrade to the fixed version with the command below.

pip install --upgrade 'paddlepaddle>=2.5.0'

Details

Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/paddlepaddle

Introduced in: 0Fixed in: 2.5.0

Fixpip install --upgrade 'paddlepaddle>=2.5.0'

References

https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-003.md[ADVISORY]
https://github.com/advisories/GHSA-hh7p-hvm3-rg88[ADVISORY]