- What: Security update for libcap in Red Hat Enterprise Linux
- Impact: Systems with privilege management may be vulnerable if not updated
Red Hat Product Errata RHSA-2026:22957 - Security Advisory Issued: 2026-06-03 Updated: 2026-06-03 RHSA-2026:22957 - Security Advisory Overview Updated Packages Synopsis Important: libcap security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libcap is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Libcap is a library for getting and setting POSIX.1e (formerly POSIX 6) draft 15 capabilities. Security Fix(es): libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() (CVE-2026-4878) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2451615 - CVE-2026-4878 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file() CVEs CVE-2026-4878 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM libcap-2.48-5.el8_8.1.src.rpm SHA-256: 6765eb57c3d12a5b3e3622d12c2b8077fd9802d311309531f95dd85ac9ef9e18 x86_64 libcap-2.48-5.el8_8.1.i686.rpm SHA-256: 3532acc2086b8314a84c917efcaf7b3bbd773911e0956182bcaeb1a561efe178 libcap-2.48-5.el8_8.1.x86_64.rpm SHA-256: 6c6cb6204c5c244584f5fc29e03e7ceb98b63777583b2b3daae2aeddca37d66f libcap-debuginfo-2.48-5.el8_8.1.i686.rpm SHA-256: e8f4227a38ca55f01a54d5fc01668179a097982941c8f59403333cd2a5e9721a libcap-debuginfo-2.48-5.el8_8.1.x86_64.rpm SHA-256: e092e2429b7e4f795a8012c549d11d17b75152929ea2fe6063f87fffe9a74134 libcap-debugsource-2.48-5.el8_8.1.i686.rpm SHA-256: 9236af0be0a7e43cc6f74619c6d3c1c5f4ef8b6192774b22ce8981d4f593f8cf libcap-debugsource-2.48-5.el8_8.1.x86_64.rpm SHA-256: bfb039c44e981a17ec8fdc24b59d3cfa39881340b8d3b83314a66a25e24b3ec5 libcap-devel-2.48-5.el8_8.1.i686.rpm SHA-256: 3419b3af64dde0cae9ae0cdf18a892e97e2cbd010111c20b83b3ef9ddbdf6419 libcap-devel-2.48-5.el8_8.1.x86_64.rpm SHA-256: e2a7a9653f1b0166cfcd24d81a6f5b967107b750e6c081feee5844ceec273336 Red Hat Enterprise Linux Server - TUS 8.8 SRPM libcap-2.48-5.el8_8.1.src.rpm SHA-256: 6765eb57c3d12a5b3e3622d12c2b8077fd9802d311309531f95dd85ac9ef9e18 x86_64 libcap-2.48-5.el8_8.1.i686.rpm SHA-256: 3532acc2086b8314a84c917efcaf7b3bbd773911e0956182bcaeb1a561efe178 libcap-2.48-5.el8_8.1.x86_64.rpm SHA-256: 6c6cb6204c5c244584f5fc29e03e7ceb98b63777583b2b3daae2aeddca37d66f libcap-debuginfo-2.48-5.el8_8.1.i686.rpm SHA-256: e8f4227a38ca55f01a54d5fc01668179a097982941c8f59403333cd2a5e9721a libcap-debuginfo-2.48-5.el8_8.1.x86_64.rpm SHA-256: e092e2429b7e4f795a8012c549d11d17b75152929ea2fe6063f87fffe9a74134 libcap-debugsource-2.48-5.el8_8.1.i686.rpm SHA-256: 9236af0be0a7e43cc6f74619c6d3c1c5f4ef8b6192774b22ce8981d4f593f8cf libcap-debugsource-2.48-5.el8_8.1.x86_64.rpm SHA-256: bfb039c44e981a17ec8fdc24b59d3cfa39881340b8d3b83314a66a25e24b3ec5 libcap-devel-2.48-5.el8_8.1.i686.rpm SHA-256: 3419b3af64dde0cae9ae0cdf18a892e97e2cbd010111c20b83b3ef9ddbdf6419 libcap-devel-2.48-5.el8_8.1.x86_64.rpm SHA-256: e2a7a9653f1b0166cfcd24d81a6f5b967107b750e6c081feee5844ceec273336 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM libcap-2.48-5.el8_8.1.src.rpm SHA-256: 6765eb57c3d12a5b3e3622d12c2b8077fd9802d311309531f95dd85ac9ef9e18 ppc64le libcap-2.48-5.el8_8.1.ppc64le.rpm SHA-256: 2005a731470e093fdb4715140f7b6e0f673d18093866d55fe5aed0f4101b2a9f libcap-debuginfo-2.48-5.el8_8.1.ppc64le.rpm SHA-256: 92bd5f8ab67440b7c6d28e73f8d2575d52884da984b58b0a39a43ee4c85b124f libcap-debugsource-2.48-5.el8_8.1.ppc64le.rpm SHA-256: 58847d00ea71c126183cbcb8f07aace383031ad7c078d02f69b3b5927b87524e libcap-devel-2.48-5.el8_8.1.ppc64le.rpm SHA-256: 3f7132a1db2b80cdefaff6564770c23d4448c852aae6d2385edd0facb4ba73ae Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM libcap-2.48-5.el8_8.1.src.rpm SHA-256: 6765eb57c3d12a5b3e3622d12c2b8077fd9802d311309531f95dd85ac9ef9e18 x86_64 libcap-2.48-5.el8_8.1.i686.rpm SHA-256: 3532acc2086b8314a84c917efcaf7b3bbd773911e0956182bcaeb1a561efe178 libcap-2.48-5.el8_8.1.x86_64.rpm SHA-256: 6c6cb6204c5c244584f5fc29e03e7ceb98b63777583b2b3daae2aeddca37d66f libcap-debuginfo-2.48-5.el8_8.1.i686.rpm SHA-256: e8f4227a38ca55f01a54d5fc01668179a097982941c8f59403333cd2a5e9721a libcap-debuginfo-2.48-5.el8_8.1.x86_64.rpm SHA-256: e092e2429b7e4f795a8012c549d11d17b75152929ea2fe6063f87fffe9a74134 libcap-debugsource-2.48-5.el8_8.1.i686.rpm SHA-256: 9236af0be0a7e43cc6f74619c6d3c1c5f4ef8b6192774b22ce8981d4f593f8cf libcap-debugsource-2.48-5.el8_8.1.x86_64.rpm SHA-256: bfb039c44e981a17ec8fdc24b59d3cfa39881340b8d3b83314a66a25e24b3ec5 libcap-devel-2.48-5.el8_8.1.i686.rpm SHA-256: 3419b3af64dde0cae9ae0cdf18a892e97e2cbd010111c20b83b3ef9ddbdf6419 libcap-devel-2.48-5.el8_8.1.x86_64.rpm SHA-256: e2a7a9653f1b0166cfcd24d81a6f5b967107b750e6c081feee5844ceec273336 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .