Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
CLSA-2026-1792443899
See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792443899.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792443899
Upstream
CVE-2026-4878
Published
2026-10-19T21:05:15Z
Modified
2026-10-26T09:31:59Z
Summary
libcap: Fix of 2 CVEs
Details
CVE-2026-4878: fix TOCTOU race in cap_set_file() by performing xattr writes via an O_NOFOLLOW file descriptor instead of the user-supplied path
References
https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792443899.html
https://nvd.nist.gov/vuln/detail/CVE-2023-2603
https://nvd.nist.gov/vuln/detail/CVE-2026-4878
Affected packages
TuxCare:RHEL:7
/
libcap
Package
Name
libcap
Purl
pkg:rpm/tuxcare/libcap?distro=rhel-7
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.22-11.el7.tuxcare.els2
Database specific
source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792443899.json"
TuxCare:RHEL:7
/
libcap-devel
Package
Name
libcap-devel
Purl
pkg:rpm/tuxcare/libcap-devel?distro=rhel-7
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2.22-11.el7.tuxcare.els2
Database specific
source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792443899.json"
CLSA-2026-1792443899 - OSV