RLSA-2026:12441

Synopsis

Important: libcap security update

Description

Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities.

Security Fix(es):

* libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2451615

CVEs

CVE-2026-4878

Affected packages

Rocky Linux 9 aarch64 - BaseOS

libcap-0:2.48-10.el9_7.1.aarch64.rpm libcap-0:2.48-10.el9_7.1.src.rpm libcap-debuginfo-0:2.48-10.el9_7.1.aarch64.rpm libcap-debugsource-0:2.48-10.el9_7.1.aarch64.rpm

Rocky Linux 9 x86_64 - BaseOS

libcap-0:2.48-10.el9_7.1.i686.rpm libcap-0:2.48-10.el9_7.1.src.rpm libcap-0:2.48-10.el9_7.1.x86_64.rpm libcap-debuginfo-0:2.48-10.el9_7.1.i686.rpm libcap-debuginfo-0:2.48-10.el9_7.1.x86_64.rpm libcap-debugsource-0:2.48-10.el9_7.1.i686.rpm libcap-debugsource-0:2.48-10.el9_7.1.x86_64.rpm

Rocky Linux 9 ppc64le - BaseOS

libcap-0:2.48-10.el9_7.1.ppc64le.rpm libcap-0:2.48-10.el9_7.1.src.rpm libcap-debuginfo-0:2.48-10.el9_7.1.ppc64le.rpm libcap-debugsource-0:2.48-10.el9_7.1.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

libcap-0:2.48-10.el9_7.1.s390x.rpm libcap-0:2.48-10.el9_7.1.src.rpm libcap-debuginfo-0:2.48-10.el9_7.1.s390x.rpm libcap-debugsource-0:2.48-10.el9_7.1.s390x.rpm

Rocky Linux 9 aarch64 - AppStream

libcap-devel-0:2.48-10.el9_7.1.aarch64.rpm

Rocky Linux 9 x86_64 - AppStream

libcap-devel-0:2.48-10.el9_7.1.i686.rpm libcap-devel-0:2.48-10.el9_7.1.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

libcap-devel-0:2.48-10.el9_7.1.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

libcap-devel-0:2.48-10.el9_7.1.s390x.rpm