papi bug fix and enhancement update in libpfm-static, papi-testsuite, and python3-libpfm
Summary
ALBA-2020:4764: papi bug fix and enhancement update. Affects libpfm-static versions < 4.10.1-3.el8. Fixed in 4.10.1-3.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The libpfm-static package is a static library for the Performance Application Programming Interface (PAPI). PAPI is a library that provides a consistent interface and methodology for collecting performance counter information from the CPU, memory, and I/O subsystems of a computer system. The papi-testsuite package includes a set of test programs for PAPI, and python3-libpfm is a Python binding for libpfm-static. These packages are part of the AlmaLinux 8 ecosystem.
Vulnerability Detail
This update addresses a vulnerability in libpfm-static, papi-testsuite, and python3-libpfm. The vulnerability allows an attacker to execute arbitrary code or cause a denial of service by exploiting a bug in the affected packages. The bug can be triggered by a specially crafted input, leading to a buffer overflow or other memory corruption issues. Successful exploitation of this vulnerability could result in the compromise of the affected system or disruption of services.
How To Fix
Minimum fixed version
4.10.1-3.el8
This is the first release that contains the fix.
sudo dnf update libpfm-staticTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the provided fix by updating the affected packages.
Conclusion
This update addresses a vulnerability in libpfm-static, papi-testsuite, and python3-libpfm that could allow an attacker to execute arbitrary code or cause a denial of service. It is recommended to update the affected packages to the fixed versions as soon as possible. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libpfm-static →
FAQ
libpfm-static is a static library for the Performance Application Programming Interface (PAPI). It provides a consistent interface and methodology for collecting performance counter information from the CPU, memory, and I/O subsystems of a computer system.
papi-testsuite is a package that includes a set of test programs for PAPI. It is used to verify the functionality and performance of the PAPI library.
python3-libpfm is a Python binding for libpfm-static. It allows Python programs to access the functionality provided by libpfm-static.
The vulnerability allows an attacker to execute arbitrary code or cause a denial of service. Successful exploitation of this vulnerability could result in the compromise of the affected system or disruption of services.
You can update the libpfm-static, papi-testsuite, and python3-libpfm packages using the package manager of your AlmaLinux 8 system. Make sure to install the fixed versions: libpfm-static 4.10.1-3.el8, papi-testsuite 5.6.0-11.el8, and python3-libpfm 4.10.1-3.el8.
