Bug 2223729
| Summary: | CVE-2023-38403 iperf3: memory allocation hazard and crash [rhel-8] | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Jonathan Wright <jonathan> |
| Component: | iperf3 | Assignee: | Michal Ruprich <mruprich> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | František Hrdina <fhrdina> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | CentOS Stream | CC: | bnater, bstinson, carl, dollierp, fhrdina, jwboyer, mcascell, neil, ngompa13, pemensik, sbonazzo |
| Target Milestone: | rc | Keywords: | Security, Triaged |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | iperf3-3.5-8.el8 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2023-08-11 13:15:19 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2222204 | ||
|
Description
Jonathan Wright
2023-07-18 16:47:10 UTC
I see you have created your own bug for CVE-2023-38403. We use internal trackers visible only to Red Hatters for CVEs. For high severity CVEs those do not wait for engineers to ack them, but are prepared by security team. Can you please use CVE identifier to reference a bug? It should be used automatically. Use: Resolves: CVE-2023-38403 In commit message instead of bug number. It would choose appropriate bug number for the release. Fix in git, moving to MODIFIED. build: https://kojihub.stream.rdu2.redhat.com/koji/buildinfo?buildID=36165 git: https://gitlab.com/redhat/centos-stream/rpms/iperf3/-/commit/44939d1eb3c7fd6dfa87ee0dac8ac8ab7f51161b This issue is now fixed in the CentOS Stream by this build: https://kojihub.stream.rdu2.redhat.com/koji/buildinfo?buildID=36165 The git commit can be found here: https://gitlab.com/redhat/centos-stream/rpms/iperf3/-/commit/3b2f893b4a102a3834c355ee8d29bb5a6c584073 Feel free to reopen the bug if you feel that this needs more attention. |