[CLSA-2026:1792443899] libcap: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-19 21:05:15 UTC
Description:
- CVE-2026-4878: fix TOCTOU race in cap_set_file() by performing xattr writes via an O_NOFOLLOW file descriptor instead of the user-supplied path
CVEs fixed:
Updated packages:
  • libcap-2.22-11.el7.tuxcare.els2.i686.rpm
    sha:463b3bf52257159b24710f771429e4f3e64d0ce04459c51d68691a859161776c
  • libcap-2.22-11.el7.tuxcare.els2.x86_64.rpm
    sha:8d244a636864d624b8e9793a9b48472d791e1876955cd13ac0b345cf056db728
  • libcap-devel-2.22-11.el7.tuxcare.els2.i686.rpm
    sha:29e246f6dfb749608927de3b73206996fa69f2ab46775d5a7149575adfc01f6b
  • libcap-devel-2.22-11.el7.tuxcare.els2.x86_64.rpm
    sha:fe7b9eaa4b85ab20b2058ac50ca3a23d890666e7302c15bb5cb19793e01bbcdb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.