
Catalogo CVE
CVE-2026-4878
A flaw was found in libcap. A local unprivileged user…
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
- Gravità
- High · CVSS 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.20% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie | libcap2 | 1:2.75-10+deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Debiansid | libcap2 | 1:2.78-1 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Debianforky | libcap2 | 1:2.78-1 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Debianbookworm | libcap2 | 1:2.66-4+deb12u3 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
Showing 4 fix observations. All 56 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| UnknownRelease not reported | enterprise_linux | Not reported | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | libcap | Not reported | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | libcap2 | 1:2.66-4+deb12u3 | UnknownSource applicability is not established | Provider not reported |
| UnknownRelease not reported | openshift_container_platform | Not reported | UnknownSource applicability is not established | Provider not reported |
| Alpine3.20 | libcap | 2.78-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2026-4878] |
| Alpine3.21 | libcap | 2.78-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2026-4878] |
| Alpine3.22 | libcap | 2.78-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2026-4878] |
| Alpine3.23 | libcap | 2.78-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2026-4878] |
| Alpine3.24 | libcap | 2.78-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2026-4878] |
| Debianbookworm | libcap2 | 1:2.66-4+deb12u3 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Debianforky | libcap2 | 1:2.78-1 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Debiansid | libcap2 | 1:2.78-1 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Debiantrixie | libcap2 | 1:2.75-10+deb13u1 | FixedDistribution-reported fixed boundary | [CVE-2026-4878] |
| Opensuseleap 16.0 | libcap | 2.73-160000.3.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2026:20613-1] |
| Opensusetumbleweed | libcap | 2.78-1.1 | UnknownSource applicability is not established | [OPENSUSE-SU-2026:10536-1] |
| Suselinux enterprise high performance computing 15 sp4-espos | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise high performance computing 15 sp4-ltss | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise high performance computing 15 sp5-espos | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise high performance computing 15 sp5-ltss | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise micro 5.3 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise micro 5.4 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise micro 5.5 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise module for basesystem 15 sp7 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server 12 sp5-ltss | libcap | 2.26-14.12.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1433-1] |
| Suselinux enterprise server 15 sp4-ltss | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server 15 sp5-ltss | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server 15 sp6-ltss | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server for sap applications 15 sp4 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server for sap applications 15 sp5 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server for sap applications 15 sp6 | libcap | 2.63-150400.3.6.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1432-1] |
| Suselinux enterprise server ltss extended security 12 sp5 | libcap | 2.26-14.12.1 | UnknownSource applicability is not established | [SUSE-SU-2026:1433-1] |
| Suselinux micro 6.0 | libcap | 2.69-3.1 | UnknownSource applicability is not established | [SUSE-SU-2026:21243-1] |
| Suselinux micro 6.1 | libcap | 2.69-slfo.1.1_2.1 | UnknownSource applicability is not established | [SUSE-SU-2026:21257-1] |
| Suselinux micro 6.2 | libcap | 2.73-160000.3.1 | UnknownSource applicability is not established | [SUSE-SU-2026:21274-1] |
| Ubuntu22.04 | libcap2 | 1:2.44-1build1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu22.04 | libcap2 | 1:2.44-1build2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu22.04 | libcap2 | 1:2.44-1build3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu22.04 | libcap2 | 1:2.44-1ubuntu0.22.04.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu22.04 | libcap2 | 1:2.44-1ubuntu0.22.04.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu22.04 | libcap2 | 1:2.44-1ubuntu0.22.04.3 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu24.04 | libcap2 | 1:2.66-4ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu24.04 | libcap2 | 1:2.66-5ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu24.04 | libcap2 | 1:2.66-5ubuntu2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu24.04 | libcap2 | 1:2.66-5ubuntu2.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu24.04 | libcap2 | 1:2.66-5ubuntu2.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu24.04 | libcap2 | 1:2.66-5ubuntu2.4 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu25.10 | libcap2 | 1:2.73-4ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu25.10 | libcap2 | 1:2.75-7ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu25.10 | libcap2 | 1:2.75-7ubuntu2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntu25.10 | libcap2 | 1:2.75-7ubuntu2.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-1] |
| Ubuntupro | libcap2 | 1:2.25-2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-2] |
| Ubuntupro | libcap2 | 1:2.27-1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-2] |
| Ubuntupro | libcap2 | 1:2.32-1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-2] |
| Ubuntupro | libcap2 | 1:2.32-1ubuntu0.1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-2] |
| Ubuntupro | libcap2 | 1:2.32-1ubuntu0.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-2] |
| Ubuntupro | libcap2 | 1:2.32-1ubuntu0.2+esm1 | UnknownSource applicability is not established | [UBUNTU-CVE-2026-4878][USN-8193-2] |
Original provider fields
{
"package_releases": [
{
"name": "libcap2",
"status": "fixed",
"release": "sid",
"version": "1:2.78-1"
},
{
"name": "libcap2",
"status": "fixed",
"release": "forky",
"version": "1:2.78-1"
},
{
"name": "libcap2",
"status": "fixed",
"release": "trixie",
"version": "1:2.75-10+deb13u1"
},
{
"name": "libcap2",
"status": "fixed",
"release": "bookworm",
"version": "1:2.66-4+deb12u3"
}
],
"fixed_versions": [
{
"bug": null,
"name": "libcap2",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "1:2.78-1"
},
{
"bug": null,
"name": "libcap2",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "1:2.78-1"
},
{
"bug": null,
"name": "libcap2",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "1:2.75-10+deb13u1"
},
{
"bug": null,
"name": "libcap2",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "1:2.66-4+deb12u3"
}
],
"distribution_packages": [
{
"name": "libcap",
"fixed_version": "",
"applicability_unknown": true
},
{
"name": "openshift_container_platform",
"fixed_version": "",
"applicability_unknown": true
},
{
"name": "enterprise_linux",
"fixed_version": "",
"applicability_unknown": true
},
{
"name": "libcap2",
"fixed_version": "1:2.66-4+deb12u3",
"applicability_unknown": true
},
{
"name": "libcap",
"ranges": [],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"fixed_version": "",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-4878",
"provider_updated_at": "2026-10-26T21:10:00.170"
},
{
"name": "openshift_container_platform",
"ranges": [],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"fixed_version": "",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-4878",
"provider_updated_at": "2026-10-26T21:10:00.170"
},
{
"name": "enterprise_linux",
"ranges": [],
"ecosystem": "cpe",
"provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"fixed_version": "",
"provider_source": "nvd",
"provider_record_id": "NVD-CVE-2026-4878",
"provider_updated_at": "2026-10-26T21:10:00.170"
},
{
"name": "libcap",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.78-r0"
}
]
}
],
"release": "3.20",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-4878",
"fixed_version": "2.78-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2026-4878",
"provider_updated_at": "2026-10-01T02:17:49.322445605Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.78-r0"
}
]
}
],
"release": "3.21",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-4878",
"fixed_version": "2.78-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2026-4878",
"provider_updated_at": "2026-10-01T02:17:49.322445605Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.78-r0"
}
]
}
],
"release": "3.22",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-4878",
"fixed_version": "2.78-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2026-4878",
"provider_updated_at": "2026-10-01T02:17:49.322445605Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.78-r0"
}
]
}
],
"release": "3.23",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-4878",
"fixed_version": "2.78-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2026-4878",
"provider_updated_at": "2026-10-01T02:17:49.322445605Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.78-r0"
}
]
}
],
"release": "3.24",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-4878",
"fixed_version": "2.78-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2026-4878",
"provider_updated_at": "2026-10-01T02:17:49.322445605Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.32-1ubuntu0.2+esm1"
}
]
}
],
"release": "pro",
"versions": [
"1:2.25-2",
"1:2.27-1",
"1:2.32-1",
"1:2.32-1ubuntu0.1",
"1:2.32-1ubuntu0.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-4878",
"fixed_version": "1:2.32-1ubuntu0.2+esm1",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-4878",
"provider_updated_at": "2026-06-24T02:29:23.557692146Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.44-1ubuntu0.22.04.3"
}
]
}
],
"release": "22.04",
"versions": [
"1:2.44-1build1",
"1:2.44-1build2",
"1:2.44-1build3",
"1:2.44-1ubuntu0.22.04.1",
"1:2.44-1ubuntu0.22.04.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-4878",
"fixed_version": "1:2.44-1ubuntu0.22.04.3",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-4878",
"provider_updated_at": "2026-06-24T02:29:23.557692146Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.66-5ubuntu2.4"
}
]
}
],
"release": "24.04",
"versions": [
"1:2.66-4ubuntu1",
"1:2.66-5ubuntu1",
"1:2.66-5ubuntu2",
"1:2.66-5ubuntu2.1",
"1:2.66-5ubuntu2.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-4878",
"fixed_version": "1:2.66-5ubuntu2.4",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-4878",
"provider_updated_at": "2026-06-24T02:29:23.557692146Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.75-7ubuntu2.2"
}
]
}
],
"release": "25.10",
"versions": [
"1:2.73-4ubuntu1",
"1:2.75-7ubuntu1",
"1:2.75-7ubuntu2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-4878",
"fixed_version": "1:2.75-7ubuntu2.2",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2026-4878",
"provider_updated_at": "2026-06-24T02:29:23.557692146Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.32-1ubuntu0.2+esm1"
}
]
}
],
"release": "pro",
"versions": [
"1:2.25-2",
"1:2.27-1",
"1:2.32-1",
"1:2.32-1ubuntu0.1",
"1:2.32-1ubuntu0.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8193-2",
"fixed_version": "1:2.32-1ubuntu0.2+esm1",
"provider_source": "pypi",
"provider_record_id": "USN-8193-2",
"provider_updated_at": "2026-06-24T02:29:23.423232622Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.44-1ubuntu0.22.04.3"
}
]
}
],
"release": "22.04",
"versions": [
"1:2.44-1build1",
"1:2.44-1build2",
"1:2.44-1build3",
"1:2.44-1ubuntu0.22.04.1",
"1:2.44-1ubuntu0.22.04.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8193-1",
"fixed_version": "1:2.44-1ubuntu0.22.04.3",
"provider_source": "pypi",
"provider_record_id": "USN-8193-1",
"provider_updated_at": "2026-04-29T09:53:20.641115Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.66-5ubuntu2.4"
}
]
}
],
"release": "24.04",
"versions": [
"1:2.66-4ubuntu1",
"1:2.66-5ubuntu1",
"1:2.66-5ubuntu2",
"1:2.66-5ubuntu2.1",
"1:2.66-5ubuntu2.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8193-1",
"fixed_version": "1:2.66-5ubuntu2.4",
"provider_source": "pypi",
"provider_record_id": "USN-8193-1",
"provider_updated_at": "2026-04-29T09:53:20.641115Z",
"applicability_unknown": true
},
{
"name": "libcap2",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.75-7ubuntu2.2"
}
]
}
],
"release": "25.10",
"versions": [
"1:2.73-4ubuntu1",
"1:2.75-7ubuntu1",
"1:2.75-7ubuntu2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/USN-8193-1",
"fixed_version": "1:2.75-7ubuntu2.2",
"provider_source": "pypi",
"provider_record_id": "USN-8193-1",
"provider_updated_at": "2026-04-29T09:53:20.641115Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.73-160000.3.1"
}
]
}
],
"release": "linux micro 6.2",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:21274-1",
"fixed_version": "2.73-160000.3.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:21274-1",
"provider_updated_at": "2026-04-25T18:24:32.066824Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.69-slfo.1.1_2.1"
}
]
}
],
"release": "linux micro 6.1",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:21257-1",
"fixed_version": "2.69-slfo.1.1_2.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:21257-1",
"provider_updated_at": "2026-04-24T18:25:14.343438Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.69-3.1"
}
]
}
],
"release": "linux micro 6.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:21243-1",
"fixed_version": "2.69-3.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:21243-1",
"provider_updated_at": "2026-04-24T18:24:33.450293Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.73-160000.3.1"
}
]
}
],
"release": "leap 16.0",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:20613-1",
"fixed_version": "2.73-160000.3.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2026:20613-1",
"provider_updated_at": "2026-04-24T08:16:25.964457Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.26-14.12.1"
}
]
}
],
"release": "linux enterprise server 12 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1433-1",
"fixed_version": "2.26-14.12.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1433-1",
"provider_updated_at": "2026-04-18T08:01:30.175723Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.26-14.12.1"
}
]
}
],
"release": "linux enterprise server ltss extended security 12 sp5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1433-1",
"fixed_version": "2.26-14.12.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1433-1",
"provider_updated_at": "2026-04-18T08:01:30.175723Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise micro 5.3",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise micro 5.4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise micro 5.5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise module for basesystem 15 sp7",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise high performance computing 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp5-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server 15 sp6-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.63-150400.3.6.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15 sp6",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2026:1432-1",
"fixed_version": "2.63-150400.3.6.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2026:1432-1",
"provider_updated_at": "2026-04-18T08:00:22.800380Z",
"applicability_unknown": true
},
{
"name": "libcap",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.78-1.1"
}
]
}
],
"release": "tumbleweed",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2026:10536-1",
"fixed_version": "2.78-1.1",
"provider_source": "pypi",
"provider_record_id": "OPENSUSE-SU-2026:10536-1",
"provider_updated_at": "2026-04-13T07:45:07.226659Z",
"applicability_unknown": true
}
]
}OpenFactory catalog packages
L’associazione dei pacchetti è in corso.
[Debian 12 (Bookworm)]
- [libcap2]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.66-4+deb12u3+b1· amd64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
1:2.66-4+deb12u3+b1· arm64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
- [libcap2-bin]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.66-4+deb12u3+b1· amd64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
1:2.66-4+deb12u3+b1· arm64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
- [libcap-dev]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.66-4+deb12u3+b1· amd64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
1:2.66-4+deb12u3+b1· arm64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
- [libpam-cap]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.66-4+deb12u3+b1· amd64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
1:2.66-4+deb12u3+b1· arm64 · bookwormCorretta · Corretta:
1:2.66-4+deb12u3nvd · libcap2 · debian · bookworm; nvd · libcap2 · debian · 12
[Debian 13 (Trixie)]
- [golang-kernel-pub-linux-libs-security-libcap-dev]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.75-10+deb13u1· all · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
1:2.75-10+deb13u1· all · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
- [libcap2]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.75-10+deb13u1+b1· amd64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
1:2.75-10+deb13u1+b1· arm64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
- [libcap2-bin]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.75-10+deb13u1+b1· amd64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
1:2.75-10+deb13u1+b1· arm64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
- [libcap-dev]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.75-10+deb13u1+b1· amd64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
1:2.75-10+deb13u1+b1· arm64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
- [libpam-cap]Sconosciuto
Pacchetto sorgente: [libcap2]
Dettagli (2)
1:2.75-10+deb13u1+b1· amd64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
1:2.75-10+deb13u1+b1· arm64 · trixieCorretta · Corretta:
1:2.75-10+deb13u1nvd · libcap2 · debian · 13
[openSUSE Tumbleweed]
- [libcap2]Sconosciuto
Pacchetto sorgente: [libcap]
Dettagli (1)
2.78-1.4· x86_64 · tumbleweedSconosciuto · Corretta:
2.78-1.1Version impact unknown
nvd · libcap · opensuse · tumbleweed
- [libcap2-32bit]Sconosciuto
Pacchetto sorgente: [libcap]
Dettagli (1)
2.78-1.4· x86_64 · tumbleweedSconosciuto · Corretta:
2.78-1.1Version impact unknown
nvd · libcap · opensuse · tumbleweed
- [libcap-devel]Sconosciuto
Pacchetto sorgente: [libcap]
Dettagli (1)
2.78-1.4· x86_64 · tumbleweedSconosciuto · Corretta:
2.78-1.1Version impact unknown
nvd · libcap · opensuse · tumbleweed
- [libcap-progs]Sconosciuto
Pacchetto sorgente: [libcap]
Dettagli (1)
2.78-1.4· x86_64 · tumbleweedSconosciuto · Corretta:
2.78-1.1Version impact unknown
nvd · libcap · opensuse · tumbleweed
- [libpsx2]Sconosciuto
Pacchetto sorgente: [libcap]
Dettagli (1)
2.78-1.4· x86_64 · tumbleweedSconosciuto · Corretta:
2.78-1.1Version impact unknown
nvd · libcap · opensuse · tumbleweed
- [libpsx2-32bit]Sconosciuto
Pacchetto sorgente: [libcap]
Dettagli (1)
2.78-1.4· x86_64 · tumbleweedSconosciuto · Corretta:
2.78-1.1Version impact unknown
nvd · libcap · opensuse · tumbleweed
Osservato:
Riferimenti
- [http://www.openwall.com/lists/oss-security/2026/04/07/14]
- [http://www.openwall.com/lists/oss-security/2026/04/07/4]
- [http://www.openwall.com/lists/oss-security/2026/04/08/9]
- [http://www.openwall.com/lists/oss-security/2026/04/09/5]
- [http://www.openwall.com/lists/oss-security/2026/04/09/6]
- [https://access.redhat.com/errata/RHSA-2026:12423]
- [https://access.redhat.com/errata/RHSA-2026:12441]
- [https://access.redhat.com/errata/RHSA-2026:13285]
- [https://access.redhat.com/errata/RHSA-2026:14162]
- [https://access.redhat.com/errata/RHSA-2026:14937]
- [https://access.redhat.com/errata/RHSA-2026:19130]
- [https://access.redhat.com/errata/RHSA-2026:19346]
- [https://access.redhat.com/errata/RHSA-2026:19456]
- [https://access.redhat.com/errata/RHSA-2026:19458]
- [https://access.redhat.com/errata/RHSA-2026:20595]
- [https://access.redhat.com/errata/RHSA-2026:21254]
- [https://access.redhat.com/errata/RHSA-2026:21275]
- [https://access.redhat.com/errata/RHSA-2026:22634]
- [https://access.redhat.com/errata/RHSA-2026:22957]
- [https://access.redhat.com/errata/RHSA-2026:23233]
- [https://access.redhat.com/errata/RHSA-2026:23245]
- [https://access.redhat.com/errata/RHSA-2026:24346]
- [https://access.redhat.com/errata/RHSA-2026:25044]
- [https://access.redhat.com/errata/RHSA-2026:25096]
- [https://access.redhat.com/errata/RHSA-2026:25181]
- [https://access.redhat.com/errata/RHSA-2026:26542]
- [https://access.redhat.com/errata/RHSA-2026:27998]
- [https://access.redhat.com/errata/RHSA-2026:28887]
- [https://access.redhat.com/errata/RHSA-2026:29197]
- [https://access.redhat.com/errata/RHSA-2026:30078]
- [https://access.redhat.com/errata/RHSA-2026:30087]
- [https://access.redhat.com/errata/RHSA-2026:30088]
- [https://access.redhat.com/errata/RHSA-2026:30089]
- [https://access.redhat.com/errata/RHSA-2026:34098]
- [https://access.redhat.com/errata/RHSA-2026:39981]
- [https://access.redhat.com/errata/RHSA-2026:58981]
- [https://access.redhat.com/errata/RHSA-2026:59831]
- [https://access.redhat.com/errata/RHSA-2026:72502]
- [https://access.redhat.com/errata/RHSA-2026:74674]
- [https://access.redhat.com/errata/RHSA-2026:7473]
- [https://access.redhat.com/errata/RHSA-2026:82304]
- [https://access.redhat.com/errata/RHSA-2026:82322]
- [https://access.redhat.com/errata/RHSA-2026:82347]
- [https://access.redhat.com/errata/RHSA-2026:82354]
- [https://access.redhat.com/errata/RHSA-2026:82372]
- [https://access.redhat.com/errata/RHSA-2026:82857]
- [https://access.redhat.com/errata/RHSA-2026:82888]
- [https://access.redhat.com/security/cve/CVE-2026-4878]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2447554]
- [https://bugzilla.redhat.com/show_bug.cgi?id=2451615]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10536-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-4878]
- [https://osv.dev/vulnerability/ALPINE-CVE-2026-4878]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-4878]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1432-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:1433-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:21243-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:21257-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:21274-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-4878]
- [https://osv.dev/vulnerability/USN-8193-1]
- [https://osv.dev/vulnerability/USN-8193-2]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10536-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20613-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-4878]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4878.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3043.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]