UbuntuUpdates.org

Package "procps"

Name: procps

Description:

/proc file system utilities

Latest version: 2:4.0.3-1ubuntu1.23.10.1
Release: mantic (23.10)
Level: updates
Repository: main
Homepage: https://gitlab.com/procps-ng/procps

Links


Download "procps"


Other versions of "procps" in Mantic

Repository Area Version
base main 2:4.0.3-1ubuntu1
security main 2:4.0.3-1ubuntu1.23.10.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2:4.0.3-1ubuntu1.23.10.1 2023-11-14 12:09:24 UTC

  procps (2:4.0.3-1ubuntu1.23.10.1) mantic-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2023-4016.patch: replace the use of malloc() with calloc()
      in ps/parser.c to prevent the potential for an arithmetic overflow when
      allocating memory.
    - CVE-2023-4016

 -- Ian Constantin <email address hidden> Mon, 06 Nov 2023 14:12:55 +0200

CVE-2023-4016 Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlimited amou



About   -   Send Feedback to @ubuntu_updates