elsa-2023-12872
oracle_linux[2.28-225.0.4.6] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435). - CVE-2023-4813: work around RHEL-8 limitation in test (RHEL-2435). Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com [2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com [2.28-225.0.3] - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks - Created tunable glibc.pthread.stack_hugetlb to control when hugepages can be used for stack allocation. - In case THP are enabled and glibc.pthread.stack_hugetlb is set to 0, glibc will madvise the kernel not to use allow hugepages for stack allocations. Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com [2.28-225.0.2] - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com [2.28-225.0.1] - Merge of Oracle patches for ol8u8 beta Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com [2.28-225] - Enforce a specififc internal ordering for tunables (#2154914)
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2023-4813",
"CVE-2023-4806",
"CVE-2023-4527",
"CVE-2023-4911"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[2.28-225.0.4.6]\n- CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode.\n- CVE-2203-4806: potential use-after-free in getaddrinfo.\n- CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435).\n- CVE-2023-4813: work around RHEL-8 limitation in test (RHEL-2435).\n Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.28-225.0.4]\n- CVE-2023-4911: tunables: Terminate immediately if end of input is reached\n Reviewed by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.28-225.0.3]\n- OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks\n- Created tunable glibc.pthread.stack_hugetlb to control when hugepages\n can be used for stack allocation.\n- In case THP are enabled and glibc.pthread.stack_hugetlb is set to\n 0, glibc will madvise the kernel not to use allow hugepages for stack\n allocations.\n Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.28-225.0.2]\n- OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize\n Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.28-225.0.1]\n- Merge of Oracle patches for ol8u8 beta\n Reviewed-by: Jose E. Marchesi jose.marchesi@oracle.com\n\n[2.28-225]\n- Enforce a specififc internal ordering for tunables (#2154914)",
"id": "ELSA-2023-12872",
"ovalId": "oval:com.oracle.elsa:def:202312872",
"source": "oracle_linux",
"title": "ELSA-2023-12872: glibc security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2023-12872.html"
}