Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Fedora 38: FEDORA-2023-7e4b4f49c1 Important: Procps-ng Vulnerability Patch

fedora
Calendar Grey August 21, 2023
Dist Fedora Esm H88
Security flaw detected in procps-ng; urgent patch released for Fedora 38 users to mitigate risks efficiently.
Possible buffer overflow in 'ps' (CVE-2023-4016)

Summary

The procps package contains a set of system utilities that provide

system information. Procps includes ps, free, skill, pkill, pgrep,

snice, tload, top, uptime, vmstat, pidof, pmap, slabtop, w, watch,

pwdx and pidwait.

The ps command displays a snapshot of running processes. The top command

provides a repetitive update of the statuses of running processes.

The free command displays the amounts of free and used memory on your

system. The skill command sends a terminate command (or another

specified signal) to a specified set of processes. The snice

command is used to change the scheduling priority of specified

processes. The tload command prints a graph of the current system

load average to a specified tty. The uptime command displays the

current time, how long the system has been running, how many users

are logged on, and system load averages for the past one, five,

and fifteen minutes. The w command displays a list of the users

who are currently logged on and what they are running. The watch

program watches a running program. The vmstat command displays

virtual memory statistics about processes, memory, paging, block

I/O, traps, and CPU activity. The pwdx command reports the current

working directory of a process or processes. The pidwait command

waits for processes of specified names.

Update Information:

Possible buffer overflow in 'ps' (CVE-2023-4016)

Change Log

* Tue Aug 15 2023 Jan Rybar - 3.3.17-11 - CVE-2023-4016: ps: possible buffer overflow - Resolves: bz#2230186

References


[ 1 ] Bug #2230186 - CVE-2023-4016 procps-ng: procps: ps buffer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2230186

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-30c3ca07eb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: procps-ng
Product: Fedora 38
Version: 3.3.17
Release: 11.fc38
Summary: System and process monitoring utilities

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here