ELSA-2023-4524 — Moderate: libcap security update (Oracle Linux 8)

Summary

[2.48-5]
- Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
Resolves: rhbz#2210637
- Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
Resolves: rhbz#2210644

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	libcap	0:2.48-5.el8_8
Oracle Linux · 8	libcap-devel	0:2.48-5.el8_8

Vulnerabilities 2

High 7.8

CVE-2023-2603 Public exploit

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…

libcap2 libcap2 libcap libcap Debian Ubuntu Azure Linux Alpine

Jun 6, 2023
Unscored —

CVE-2023-2602

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cau…

libcap2 libcap libcap2 libcap Debian Ubuntu Azure Linux Alpine

Jun 6, 2023

Moderate: libcap security update (Oracle Linux 8)

Summary

Fixed packages 2

Vulnerabilities 2

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cau…