Affected: AlmaLinux:10: libcap, AlmaLinux:10: libcap-devel

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.

Security Fix(es):

* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected: Alpaquita:23: libcap, Alpaquita:25: libcap, Alpaquita:stream: libcap

Withdrawn by the publisher.

Affected: CleanStart: grafana-alloy

Multiple security vulnerabilities affect the grafana-alloy package. These issues are resolved in later releases. See references for individual vulnerability details.

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.

Affected: openEuler:22.03-LTS-SP4: libcap, openEuler:24.03-LTS: libcap, openEuler:24.03-LTS-SP1: libcap, openEuler:24.03-LTS-SP2: libcap, openEuler:24.03-LTS-SP3: libcap, openEuler:20.03-LTS-SP4: libcap

This is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es):

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.(CVE-2026-4878)

libcap-devel-2.78-1.1 on GA media

libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/apache/thrift: Apache Thrift: Integer Overflow in TFramedTransport Go implementation

Affected: Rocky Linux:10: libcap

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.

Security Fix(es):

* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Security update for libcap

Affected: Ubuntu:Pro:14.04:LTS: libcap2, Ubuntu:Pro:16.04:LTS: libcap2, Ubuntu:Pro:18.04:LTS: libcap2, Ubuntu:Pro:20.04:LTS: libcap2, Ubuntu:22.04:LTS: libcap2, Ubuntu:24.04:LTS: libcap2, Ubuntu:25.10: libcap2

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.

Ein Angreifer kann mehrere Schwachstellen in Red Hat Hardened Images RPMs ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Rechte zu erweitern, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.