{"id":"CVE-2026-4878","aliases":["ALPINE-CVE-2026-4878","ALSA-2026:12423","ALSA-2026:12441","ALSA-2026:13285","ALSA-2026:19130","ALSA-2026:19346","AZL-82425","BELL-CVE-2026-4878","CLSA-2026-1777941636","CLSA-2026-1777941808","CLSA-2026-1777944214","CLSA-2026-1778081089","CLSA-2026-1778599539","CLSA-2026-1778599722","CLSA-2026-1778662651","CLSA-2026-1792443899","DEBIAN-CVE-2026-4878","EUVD-2026-20910","MGASA-2026-0221","OESA-2026-1929","RHSA-2026:12423","RHSA-2026:12441","RHSA-2026:13285","RHSA-2026:19130","RHSA-2026:19346","RHSA-2026:19456","RHSA-2026:19458","RHSA-2026:20595","RHSA-2026:21254","RHSA-2026:22957","RHSA-2026:24346","RHSA-2026:7473","RLSA-2026:12423","RLSA-2026:12441","RLSA-2026:13285","RLSA-2026:19130","RLSA-2026:19346","ROOT-OS-ALPINE-315-CVE-2026-4878","ROOT-OS-DEBIAN-12-CVE-2026-4878","ROOT-OS-DEBIAN-13-CVE-2026-4878","SUSE-SU-2026:1432-1","SUSE-SU-2026:1433-1","SUSE-SU-2026:21243-1","SUSE-SU-2026:21257-1","SUSE-SU-2026:21274-1","SUSE-SU-2026:21373-1","UBUNTU-CVE-2026-4878","USN-8193-1","USN-8193-2","openSUSE-SU-2026:10536-1","openSUSE-SU-2026:20613-1"],"status":"published","title":"Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00209,"percentile":0.11152,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-367"],"published":"2026-04-09T14:49:02Z","modified":"2026-11-04T22:41:53Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libcap","fixed_in":["2.69-7.el10_1.1","2.69-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libcap-devel","fixed_in":["2.69-7.el10_1.1","2.69-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libcap","fixed_in":["2.48-10.el9_7.1","2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libcap-devel","fixed_in":["2.48-10.el9_7.1","2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libcap","fixed_in":["2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libcap-devel","fixed_in":["2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libcap","fixed_in":["2.69-14"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"libcap","fixed_in":["2.66-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libcap","fixed_in":["2.78-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcap-dev","fixed_in":["1:2.32-1ubuntu0.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcap2","fixed_in":["1:2.32-1ubuntu0.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libcap2-bin","fixed_in":["1:2.32-1ubuntu0.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpam-cap","fixed_in":["1:2.32-1ubuntu0.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libcap","fixed_in":["2.22-11.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libcap-devel","fixed_in":["2.22-11.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libcap","fixed_in":["2.22-11.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libcap-devel","fixed_in":["2.22-11.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcap","fixed_in":["2.48-9.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcap-devel","fixed_in":["2.48-9.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcap-static","fixed_in":["2.48-9.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap-dev","fixed_in":["1:2.24-12+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2","fixed_in":["1:2.24-12+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2-bin","fixed_in":["1:2.24-12+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cap","fixed_in":["1:2.24-12+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap-dev","fixed_in":["1:2.25-1.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2","fixed_in":["1:2.25-1.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2-bin","fixed_in":["1:2.25-1.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cap","fixed_in":["1:2.25-1.2+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcap","fixed_in":["2.48-9.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcap-devel","fixed_in":["2.48-9.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcap-static","fixed_in":["2.48-9.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libcap","fixed_in":["2.22-11.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libcap-devel","fixed_in":["2.22-11.el7.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libcap2","fixed_in":["1:2.66-4+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libcap2","fixed_in":["1:2.75-10+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libcap2","fixed_in":["1:2.78-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libcap","fixed_in":["2.52-5.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libcap","fixed_in":["2.61-11.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libcap","fixed_in":["2.69-7.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libcap","fixed_in":["2.69-7.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"libcap","fixed_in":["2.69-7.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"libcap","fixed_in":["2.69-7.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libcap","fixed_in":["2.32-10.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap-debuginfo","fixed_in":["0:2.69-7.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap-debugsource","fixed_in":["0:2.69-7.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap-devel","fixed_in":["0:2.69-7.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap","fixed_in":["0:2.69-7.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debuginfo","fixed_in":["0:2.48-10.el9_7.1","0:2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debugsource","fixed_in":["0:2.48-10.el9_7.1","0:2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-devel","fixed_in":["0:2.48-10.el9_7.1","0:2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap","fixed_in":["0:2.48-10.el9_7.1","0:2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-10.el9_7.1","0:2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-10.el9_7.1","0:2.48-10.el9_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap","fixed_in":["0:2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-devel","fixed_in":["0:2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap-debuginfo","fixed_in":["0:2.69-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap-debugsource","fixed_in":["0:2.69-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap-devel","fixed_in":["0:2.69-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap","fixed_in":["0:2.69-7.el10_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap-debuginfo","fixed_in":["0:2.69-7.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap-debugsource","fixed_in":["0:2.69-7.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap-devel","fixed_in":["0:2.69-7.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap","fixed_in":["0:2.69-7.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libcap-debuginfo","fixed_in":["0:2.48-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libcap-debugsource","fixed_in":["0:2.48-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libcap-devel","fixed_in":["0:2.48-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libcap","fixed_in":["0:2.48-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libcap-debuginfo","fixed_in":["0:2.48-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libcap-debugsource","fixed_in":["0:2.48-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libcap-devel","fixed_in":["0:2.48-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libcap","fixed_in":["0:2.48-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libcap-debuginfo","fixed_in":["0:2.48-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libcap-debugsource","fixed_in":["0:2.48-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libcap-devel","fixed_in":["0:2.48-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libcap","fixed_in":["0:2.48-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap-devel","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap-devel","fixed_in":["0:2.48-5.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap-devel","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap-debuginfo","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap-debugsource","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap-devel","fixed_in":["0:2.48-4.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libcap","fixed_in":["0:2.78-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libcap-devel","fixed_in":["0:2.78-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libcap-static","fixed_in":["0:2.78-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"libcap","fixed_in":["0:2.69-7.el10_1.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libcap","fixed_in":["0:2.48-10.el9_7.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libcap","fixed_in":["0:2.48-6.el8_10.1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"libcap","fixed_in":["2.61-r10072","2.61-r10071","2.61-r10073"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-libcap","fixed_in":["2.61-r10072","2.61-r10071","2.61-r10073"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libcap","fixed_in":["2.63-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libcap","fixed_in":["2.26-14.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libcap","fixed_in":["2.26-14.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"libcap","fixed_in":["2.69-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"libcap","fixed_in":["2.69-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"libcap","fixed_in":["2.73-160000.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","fixed_in":["1:2.24-0ubuntu2+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","fixed_in":["1:2.24-12ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","fixed_in":["1:2.25-1.2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libcap2","fixed_in":["1:2.32-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","fixed_in":["1:2.44-1ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libcap2","fixed_in":["1:2.66-5ubuntu2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"libcap2","fixed_in":["1:2.75-7ubuntu2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libcap","fixed_in":["2.78-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"libcap","fixed_in":["2.73-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-14"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.66-r0"},{"fixed":"2.66-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.76-r0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.66-r0"},{"fixed":"2.78-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcap-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libcap2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpam-cap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libcap-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libcap2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-cap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libcap2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-cap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libcap-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48-9.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22-11.el7.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-4+deb12u3"}]}],"versions":["1:2.66-4","1:2.66-4+deb12u1","1:2.66-4+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.75-10+deb13u1"}]}],"versions":["1:2.75-10"]},{"source":"osv","ecosystem":"Debian:14","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.78-1"}]}],"versions":["1:2.75-10","1:2.77-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52-5.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-11.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-7.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-10.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-5.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-4.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.78-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.78-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libcap-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.78-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-6.el8_10.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.69-7.el10_1.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48-10.el9_7.1"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-r10072"},{"fixed":"2.61-r10071"},{"fixed":"2.61-r10073"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.61-r10072"},{"fixed":"2.61-r10071"},{"fixed":"2.61-r10073"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.63-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-14.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26-14.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.69-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.73-160000.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-0ubuntu2+esm2"}]}],"versions":["1:2.22-1.2ubuntu2","1:2.24-0ubuntu1","1:2.24-0ubuntu2","1:2.24-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12ubuntu0.1~esm2"}]}],"versions":["1:2.24-9","1:2.24-12","1:2.24-12ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2ubuntu0.1~esm2"}]}],"versions":["1:2.25-1.1","1:2.25-1.2","1:2.25-1.2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.2+esm1"}]}],"versions":["1:2.25-2","1:2.27-1","1:2.32-1","1:2.32-1ubuntu0.1","1:2.32-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1ubuntu0.22.04.3"}]}],"versions":["1:2.44-1build1","1:2.44-1build2","1:2.44-1build3","1:2.44-1ubuntu0.22.04.1","1:2.44-1ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-5ubuntu2.4"}]}],"versions":["1:2.66-4ubuntu1","1:2.66-5ubuntu1","1:2.66-5ubuntu2","1:2.66-5ubuntu2.1","1:2.66-5ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.75-7ubuntu2.2"}]}],"versions":["1:2.73-4ubuntu1","1:2.75-7ubuntu1","1:2.75-7ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.44-1ubuntu0.22.04.3"}]}],"versions":["1:2.44-1build1","1:2.44-1build2","1:2.44-1build3","1:2.44-1ubuntu0.22.04.1","1:2.44-1ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.66-5ubuntu2.4"}]}],"versions":["1:2.66-4ubuntu1","1:2.66-5ubuntu1","1:2.66-5ubuntu2","1:2.66-5ubuntu2.1","1:2.66-5ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.75-7ubuntu2.2"}]}],"versions":["1:2.73-4ubuntu1","1:2.75-7ubuntu1","1:2.75-7ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-0ubuntu2+esm2"}]}],"versions":["1:2.22-1.2ubuntu2","1:2.24-0ubuntu1","1:2.24-0ubuntu2","1:2.24-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.24-12ubuntu0.1~esm2"}]}],"versions":["1:2.24-9","1:2.24-12","1:2.24-12ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25-1.2ubuntu0.1~esm2"}]}],"versions":["1:2.25-1.1","1:2.25-1.2","1:2.25-1.2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libcap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.32-1ubuntu0.2+esm1"}]}],"versions":["1:2.25-2","1:2.27-1","1:2.32-1","1:2.32-1ubuntu0.1","1:2.32-1ubuntu0.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.73-160000.3.1"}]}]}],"products":[{"vendor":"libcap_project","product":"libcap"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.17"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.18"},{"vendor":"red hat","product":"cert manager support for red hat openshift release 1.20"},{"vendor":"red hat","product":"cost management 4"},{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat ai inference server 3.3"},{"vendor":"red hat","product":"red hat discovery 2"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat insights proxy 1.5"},{"vendor":"red hat","product":"red hat openshift ai 3.4"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift distributed tracing 3.9.3"},{"vendor":"red hat","product":"red hat update infrastructure 5"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:12423","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:12441","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13285","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14162","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:14937","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19130","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19346","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19456","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19458","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20595","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:21254","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:21275","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22634","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22957","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:23233","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:23245","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24346","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25044","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25096","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25181","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26542","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:27998","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28887","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30078","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30087","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30088","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:30089","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34098","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:39981","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59831","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74674","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7473","tags":["vendor-advisory","x_refsource_REDHAT","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4878","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447554","tags":["Permissions Required","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451615","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Vendor Advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/07/4","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/07/14","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/08/9","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/09/5","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/09/6","tags":["Exploit","Mailing List","Third Party Advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json","tags":["x_sadp-csaf-vex"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-4878","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2451615","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-12423.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-12441.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-13285.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19130.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19346.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4878","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-4878","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1777941636.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777941808.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2603","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1777944214.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778081089.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1778599539.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1778599722.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778662651.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792443899.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4878","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0221.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35329","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/07/4","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/04/07/14","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1929","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12423.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4878","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12441.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13285.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19130.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19346.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19456.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19458.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20595.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_21254.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22957.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24346.json","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7473.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:12423","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:12441","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:13285","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19130","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19346","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261432-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1261809","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4878","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261433-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621243-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621257-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621274-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621373-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-4878","tags":["report"]},{"url":"https://sites.google.com/site/fullycapable/release-notes-for-libcap#h.x4zn8j3lss6r","tags":["report"]},{"url":"https://github.com/AndrewGMorgan/libcap_mirror/security/advisories/GHSA-f78v-p5hx-m7hh","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8193-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8193-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-4878","title":"Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T14:49:02.942Z","modified":"2026-11-04T22:41:53.422Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-367","CWE-367"],"updated_at":"2026-11-04T23:40:09.798467Z"}],"euvd":[{"id":"EUVD-2026-20910","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T14:49:02Z","modified":"2026-11-04T22:41:53Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-05T00:47:41.139684Z"}],"nvd":[{"id":"CVE-2026-4878","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T16:16:31.987Z","modified":"2026-11-04T23:17:39.403Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-367"],"updated_at":"2026-11-05T01:45:09.431178Z"}],"osv":[{"id":"ALPINE-CVE-2026-4878","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T16:16:31.987Z","modified":"2026-10-01T02:17:49.322445605Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"BELL-CVE-2026-4878","status":"published","published":"2026-04-10T06:09:37.119175Z","modified":"2026-04-30T07:17:24.567422Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:24.391068Z"},{"id":"DEBIAN-CVE-2026-4878","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T16:16:31.987Z","modified":"2026-11-05T09:47:28.962949207Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:31:24.64316Z"},{"id":"OESA-2026-1929","title":"libcap security update","description":"This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.(CVE-2026-4878)","status":"published","published":"2026-04-17T11:10:56Z","modified":"2026-08-18T01:19:47.990449294Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:12423","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-01T10:22:46Z","modified":"2026-10-15T10:12:41Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:12441","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-01T10:22:47Z","modified":"2026-10-15T10:12:42Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:13285","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-04T10:09:56Z","modified":"2026-10-15T10:12:45Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:19130","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-20T10:09:55Z","modified":"2026-10-15T10:14:02Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19346","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-20T10:10:28Z","modified":"2026-10-15T10:14:16Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19456","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-20T10:10:46Z","modified":"2026-10-15T10:14:24Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:19458","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-20T10:10:47Z","modified":"2026-10-15T10:14:25Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20595","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-26T10:07:44Z","modified":"2026-10-15T10:14:53Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:21254","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-05-27T10:07:29Z","modified":"2026-10-15T10:14:59Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:22957","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-06-04T10:08:09Z","modified":"2026-10-15T10:15:22Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:24346","title":"Red Hat Security Advisory: libcap security update","status":"published","published":"2026-06-08T10:06:41Z","modified":"2026-10-15T10:15:32Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:7473","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-25T10:09:36Z","modified":"2026-10-15T10:26:54Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:12423","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-03T12:06:49.800095Z","modified":"2026-05-03T12:30:06.595186Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:12441","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-03T12:03:41.515195Z","modified":"2026-05-03T12:30:10.627213Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:13285","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-06T06:00:43.33234Z","modified":"2026-05-06T06:30:14.022417Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19130","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:44.845469533Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:19346","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.\n\nSecurity Fix(es):\n\n* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-20T00:03:50.188648Z","modified":"2026-05-20T00:30:27.583363924Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2026-4878","title":"CVE-2026-4878 in libcap - Patched by Root","description":"Root has patched CVE-2026-4878 in the libcap package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:22:59Z","modified":"2026-09-29T10:15:07.429049984Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-4878","title":"CVE-2026-4878 in rootio-libcap2 - Patched by Root","description":"Root has patched CVE-2026-4878 in the rootio-libcap2 package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-04-13T11:30:53Z","modified":"2026-08-19T20:00:13.602513622Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:32.298225Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-4878","title":"CVE-2026-4878 in rootio-libcap2 - Patched by Root","description":"Root has patched CVE-2026-4878 in the rootio-libcap2 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-04-16T08:08:08Z","modified":"2026-08-19T20:00:13.607479077Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"UBUNTU-CVE-2026-4878","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T16:16:00Z","modified":"2026-06-24T02:29:23.557692146Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:33.391918Z"},{"id":"ALSA-2026:12423","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  \n\nSecurity Fix(es):  \n\n  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-30T00:00:00Z","modified":"2026-10-29T11:58:17.427314Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:12441","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  \n\nSecurity Fix(es):  \n\n  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-30T00:00:00Z","modified":"2026-10-29T11:32:30.525747459Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:13285","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  \n\nSecurity Fix(es):  \n\n  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-04T00:00:00Z","modified":"2026-10-29T11:02:23.389063703Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19130","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  \n\nSecurity Fix(es):  \n\n  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:16.770907957Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19346","title":"Important: libcap security update","description":"Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.  \n\nSecurity Fix(es):  \n\n  * libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:33.995323856Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-82425","title":"CVE-2026-4878 affecting package libcap for versions less than 2.69-14","description":"A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.","status":"published","published":"2026-04-09T16:16:31Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.988217Z"},{"id":"CLSA-2026-1777941636","title":"Fix CVE(s): CVE-2026-4878","description":"   * SECURITY UPDATE: TOCTOU race in cap_set_file()\n     - debian/patches/CVE-2026-4878.patch: lock onto the target file via an\n       O_PATH descriptor and operate via /proc/self/fd/N in libcap/cap_file.c\n       so that file capability changes cannot be redirected to an attacker-\n       controlled file by a local user with write access to a parent directory.\n     - CVE-2026-4878","status":"published","published":"2026-05-05T00:40:45Z","modified":"2026-06-04T10:03:25.681916Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1777941808","title":"libcap: Fix of 2 CVEs","description":"- CVE-2026-4878: fix TOCTOU race in cap_set_file() by performing xattr writes via an O_NOFOLLOW file descriptor instead of the user-supplied path","status":"published","published":"2026-06-25T09:21:12Z","modified":"2026-10-26T09:30:58.357823841Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1777944214","title":"libcap: Fix of CVE-2026-4878","description":"- CVE-2026-4878: fix TOCTOU race in cap_set_file() by performing xattr writes via an O_NOFOLLOW file descriptor instead of the user-supplied path","status":"published","published":"2026-05-05T21:06:41Z","modified":"2026-06-01T00:33:18.723562265Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778081089","title":"libcap: Fix of CVE-2026-4878","description":"- CVE-2026-4878: cap_set_file() TOCTOU race via path-based xattr operations","status":"published","published":"2026-05-06T15:24:54Z","modified":"2026-06-01T00:30:10.855416658Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778599539","title":"Fix CVE(s): CVE-2026-4878","description":"    * SECURITY UPDATE: TOCTOU race condition in cap_set_file()\n     - debian/patches/CVE-2026-4878.patch: open the target file and operate\n       on /proc/self/fd/N so the inode is locked between the regular-file\n       check and the xattr update\n     - CVE-2026-4878","status":"published","published":"2026-05-12T15:25:43Z","modified":"2026-06-04T10:04:11.368334Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778599722","title":"Fix CVE(s): CVE-2026-4878","description":"    * SECURITY UPDATE: TOCTOU race condition in cap_set_file()\n     - debian/patches/CVE-2026-4878.patch: open the target file and operate\n       on /proc/self/fd/N so the inode is locked between the regular-file\n       check and the xattr update\n     - CVE-2026-4878","status":"published","published":"2026-05-12T15:28:46Z","modified":"2026-06-04T10:04:22.516314Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778662651","title":"libcap: Fix of CVE-2026-4878","description":"- CVE-2026-4878: cap_set_file() TOCTOU race via path-based xattr operations","status":"published","published":"2026-05-13T08:57:36Z","modified":"2026-06-01T00:32:30.170541406Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1792443899","title":"libcap: Fix of 2 CVEs","description":"- CVE-2026-4878: fix TOCTOU race in cap_set_file() by performing xattr writes via an O_NOFOLLOW file descriptor instead of the user-supplied path","status":"published","published":"2026-10-19T21:05:15Z","modified":"2026-10-26T09:31:59.430723723Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"MGASA-2026-0221","title":"Updated libcap packages fix security vulnerabilities","description":"CVE-2026-4878. A flaw was found in libcap. A local unprivileged user can\nexploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the\n`cap_set_file()` function. This allows an attacker with write access to\na parent directory to redirect file capability updates to an\nattacker-controlled file. By doing so, capabilities can be injected into\nor stripped from unintended executables, leading to privilege\nescalation.\n","status":"published","published":"2026-06-18T07:22:53Z","modified":"2026-06-18T07:30:04.789218343Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:10536-1","title":"libcap-devel-2.78-1.1 on GA media","description":"These are all security issues fixed in the libcap-devel-2.78-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-12T00:00:00Z","modified":"2026-04-13T07:45:07.226659Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20613-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in\n  `cap_set_file()` (bsc#1261809).\n","status":"published","published":"2026-04-22T10:22:37Z","modified":"2026-04-24T08:16:25.964457Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:1432-1","title":"Security update for libcap","description":"This update for libcap fixes the following issue:\n\n- CVE-2026-4878: Address a potential TOCTOU race condition in cap_set_file() (bsc#1261809).\n","status":"published","published":"2026-04-17T10:12:55Z","modified":"2026-04-18T08:00:22.80038Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1433-1","title":"Security update for libcap","description":"This update for libcap fixes the following issue:\n\n- CVE-2026-4878: Address a potential TOCTOU race condition in cap_set_file() (bsc#1261809).\n","status":"published","published":"2026-04-17T10:13:12Z","modified":"2026-04-18T08:01:30.175723Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:21243-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in\n  `cap_set_file()` (bsc#1261809).\n","status":"published","published":"2026-04-20T12:43:53Z","modified":"2026-04-24T18:24:33.450293Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21257-1","title":"Security update for libcap","description":"This update for libcap fixes the following issue:\n\n- CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in\n  `cap_set_file()` (bsc#1261809).\n","status":"published","published":"2026-04-20T16:57:37Z","modified":"2026-04-24T18:25:14.343438Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21274-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in\n  `cap_set_file()` (bsc#1261809).\n","status":"published","published":"2026-04-22T10:53:25Z","modified":"2026-04-25T18:24:32.066824Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21373-1","title":"Security update for libcap","description":"This update for libcap fixes the following issues:\n\n- CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in\n  `cap_set_file()` (bsc#1261809).\n","status":"published","published":"2026-04-22T10:53:25Z","modified":"2026-04-29T18:24:00.516267Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"USN-8193-1","title":"libcap2 vulnerability","description":"Ali Raza discovered that libcap incorrectly handled file capability\nupdates. A local attacker could possibly use this issue to inject or strip\ncapabilities into arbitrary executables and escalate privileges.","status":"published","published":"2026-04-21T15:45:29Z","modified":"2026-04-29T09:53:20.641115Z","updated_at":"2026-11-02T16:58:22.951676Z"},{"id":"USN-8193-2","title":"libcap2 vulnerability","description":"USN-8193-1 fixed a vulnerability in libcap. This update provides the\ncorresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n Ali Raza discovered that libcap incorrectly handled file capability\n updates. A local attacker could possibly use this issue to inject or strip\n capabilities into arbitrary executables and escalate privileges.","status":"published","published":"2026-06-23T19:09:47Z","modified":"2026-06-24T02:29:23.423232622Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}