CVE-2023-39976

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance logging, tracing, inter-process communication, and polling.

Security Fix(es):

• libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting log message length

• CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting log message length
• rebuild with the vendor .el9_1 dist so the update outranks AlmaLinux 2.0.6-2.el9_1

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

This update fixes a security issue.

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered (CVE-2023-39976)

These are all security issues fixed in the doxygen2man-2.0.8+20230721.002171b-2.1 package on the GA media of openSUSE Tumbleweed.

This update for libqb fixes the following issues:

• CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).

This update for libqb fixes the following issues:

• CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).

This update for libqb fixes the following issues:

• CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066).

This update for libqb fixes the following issues:

• CVE-2023-39976: Fixed potential bufferoverflow with long log messages (bsc#1214066).

It was discovered that Libqb incorrectly handled certain messages. An attacker could possibly use this issue to cause a crash or execute arbitrary code.