ELSA-2023-5071 — Moderate: libcap security update (Oracle Linux 9)

Summary

[2.48-9]
- Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
Resolves: rhbz#2210638
- Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
Resolves: rhbz#2222198

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	libcap	0:2.48-9.el9_2
Oracle Linux · 9	libcap-devel	0:2.48-9.el9_2

Vulnerabilities 2

High 7.8

CVE-2023-2603 Public exploit

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…

libcap2 libcap2 libcap libcap Debian Ubuntu Azure Linux Alpine

Jun 6, 2023
Unscored —

CVE-2023-2602

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cau…

libcap2 libcap libcap2 libcap Debian Ubuntu Azure Linux Alpine

Jun 6, 2023

Moderate: libcap security update (Oracle Linux 9)

Summary

Fixed packages 2

Vulnerabilities 2

A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…

A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cau…