913408 – (CVE-2023-4016) <sys-process/procps-4.0.4: ps buffer overflow

Bug 913408 (CVE-2023-4016) - <sys-process/procps-4.0.4: ps buffer overflow

Summary: <sys-process/procps-4.0.4: ps buffer overflow

Status:	IN_PROGRESS

Alias:	CVE-2023-4016

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:	https://gitlab.com/procps-ng/procps/-...
Whiteboard:	B3 [stable]
Keywords:

Depends on:	913537 916095 835813
Blocks:
	Show dependency tree

Reported:	2023-09-01 12:21 UTC by Sam James
Modified:	2023-10-22 11:40 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sam James archtester

2023-09-01 12:21:01 UTC

See the discussion in https://gitlab.com/procps-ng/procps/-/issues/297.

Patch 1: https://gitlab.com/procps-ng/procps/-/commit/2c933ecba3bb1d3041a5a7a53a7b4078a6003413
Patch 2: https://gitlab.com/procps-ng/procps/-/commit/f5f843e257daeceaac2504b8957e84f4bf87a8f2

Comment 1 Larry the Git Cow gentoo-dev

2023-09-02 09:59:30 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4941d04c47cc2d8b58599325fae989ce730b6a22

commit 4941d04c47cc2d8b58599325fae989ce730b6a22
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-09-02 09:57:15 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-09-02 09:59:10 +0000

    sys-process/procps: add 4.0.4
    
    Closes: https://bugs.gentoo.org/584076
    Closes: https://bugs.gentoo.org/625312
    Closes: https://bugs.gentoo.org/675420
    Closes: https://bugs.gentoo.org/835813
    Closes: https://bugs.gentoo.org/913210
    Bug: https://bugs.gentoo.org/913408
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-process/procps/Manifest                        |   1 +
 .../files/procps-4.0.4-fix-systemd-linkage.patch   |  27 +++++
 .../files/procps-4.0.4-fix-tests-multilib.patch    |  52 ++++++++++
 .../procps/files/procps-4.0.4-sysctl-manpage.patch |  33 +++++++
 .../files/procps-4.0.4-xfail-pmap-test.patch       |  25 +++++
 sys-process/procps/procps-4.0.4.ebuild             | 110 +++++++++++++++++++++
 6 files changed, 248 insertions(+)