CLSA-2026-1777941636
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1777941636.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1777941636
- Upstream
- Published
- 2026-05-05T00:40:45Z
- Modified
- 2026-06-04T09:47:38.040733822Z
- Summary
- Fix CVE(s): CVE-2026-4878
- Details
-
- SECURITY UPDATE: TOCTOU race in capsetfile()
- debian/patches/CVE-2026-4878.patch: lock onto the target file via an OPATH descriptor and operate via /proc/self/fd/N in libcap/capfile.c so that file capability changes cannot be redirected to an attacker- controlled file by a local user with write access to a parent directory.
- CVE-2026-4878
- SECURITY UPDATE: TOCTOU race in capsetfile()
- References
Affected packages
TuxCare:Ubuntu:20.04 / libcap-dev
Package
- Name
- libcap-dev
- Purl
- pkg:deb/tuxcare/libcap-dev?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / libcap2
Package
- Name
- libcap2
- Purl
- pkg:deb/tuxcare/libcap2?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / libcap2-bin
Package
- Name
- libcap2-bin
- Purl
- pkg:deb/tuxcare/libcap2-bin?distro=ubuntu-20.04