[CLSA-2026:1792704520] libcap: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-23 16:42:09 UTC
Description:
- CVE-2026-4878: fix TOCTOU race in cap_set_file() by performing xattr writes via an O_NOFOLLOW file descriptor instead of the user-supplied path
CVEs fixed:
Updated packages:
  • libcap-2.22-11.el7.tuxcare.els2.i686.rpm
    sha:eff2cb427696d574947573bb32d3d764b8475bf11981269c1c1a3561e6f4a2ce
  • libcap-2.22-11.el7.tuxcare.els2.x86_64.rpm
    sha:ea3a18b922f929bf76a3305923f9467e0cc0d4d520753f4480899499c1cad60e
  • libcap-devel-2.22-11.el7.tuxcare.els2.i686.rpm
    sha:0bfb25f57d7afbd8bd53f9a0a953cd466bd0cc7f3002e9e2872a86d688a164ac
  • libcap-devel-2.22-11.el7.tuxcare.els2.x86_64.rpm
    sha:c02672cbd07346c979ca19439eece5f2c9196640eb1f2b764d91176aa0fa9290
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.