Oracle Linux Security Advisory ELSA-2023-5071

https://linux.oracle.com/errata/ELSA-2023-5071.html

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

x86_64:
libcap-2.48-9.el9_2.i686.rpm
libcap-2.48-9.el9_2.x86_64.rpm
libcap-devel-2.48-9.el9_2.i686.rpm
libcap-devel-2.48-9.el9_2.x86_64.rpm

aarch64:
libcap-2.48-9.el9_2.aarch64.rpm
libcap-devel-2.48-9.el9_2.aarch64.rpm


SRPMS:
https://oss.oracle.com/ol9/SRPMS-updates//libcap-2.48-9.el9_2.src.rpm

Related CVEs:

CVE-2023-2602
CVE-2023-2603




Description of changes:

[2.48-9]
- Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
  Resolves: rhbz#2210638
- Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
  Resolves: rhbz#2222198


_______________________________________________
El-errata mailing list
[email protected]
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle9: ELSA-2023-5071: libcap security Moderate Security Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[2.48-9] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210638 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2222198