CVE-2023-4863

Advisory

Nvidia-modulus.sym upgrades opencv-python to address GHSA-qr4w-53vh-m672 - CVE-2023-4863.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Added

- AMP for derivatives.
- DALI based dataloader for Geometry module.
- Generalized PDE residual computing utility.
- Support for spatial gradients calculations using finite difference, meshless finite
difference, spectral and least squares methods.
- Add docs for SDF and relevant features for geometry module.

Dependencies

- Upgrade Sympy and Scikit-Learn versions.

Security

- Upgrade notebook, opencv-python and setuptools versions to fix CVEs GHSA-9q39-rmj3-p4r2,
GHSA-qr4w-53vh-m672, and GHSA-cx63-2mw6-8hw5 respectively.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6345
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863