[Debian] High CVE: CVE-2023-38403 iperf3: integer overflow and heap corruption

[Yue Tao]

CVE-2023-38403: https://nvd.nist.gov/vuln/detail/CVE-2023-38403

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Base Score: High

References:

['iperf3_3.9-1_amd64.deb===>iperf3_3.9-1+deb11u1_amd64.deb', 'libiperf0_3.9-1_amd64.deb===>libiperf0_3.9-1+deb11u1_amd64.deb']

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/891931

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/tools/+/891931
Committed: https://opendev.org/starlingx/tools/commit/67004af13a4f3ec834f6d3a81647896d142b21a3
Submitter: "Zuul (22348)"
Branch: master

commit 67004af13a4f3ec834f6d3a81647896d142b21a3
Author: Wentao Zhang <email address hidden>
Date: Sun Aug 20 20:03:22 2023 -0700

    Debian: package : fix CVE-2023-38403

    Upgrade iperf3 to 3.9-1+deb11u1
    Upgrade libiperf0 to 3.9-1+deb11u1

    Refer to:
    https://nvd.nist.gov/vuln/detail/CVE-2023-38403

    Test Plan:
    Pass: downloader
    Pass: build-pkgs --clean --all
    Pass: build-image
    Pass: boot

    Closes-bug: #2029210

    Signed-off-by: Wentao Zhang <email address hidden>
    Change-Id: I2147dec036cb22b33633d8bd459439e97efcdf88