Debian Libcap2 vulnerabilities

CVE-2026-4878 [MEDIUM] CVE-2026-4878: libcap2 bookworm: open bullseye: open forky: resolved (fixed in 1:2.78-1) sid: resolved (fixed in 1:2.78-1) trixie: open

CVE-2023-2603 [HIGH] CVE-2023-2603: libcap2 - A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() f... A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is close to 4GiB. Scope: local bookworm: resolved (fixed in 1:2.66-4) bullseye: resolved (fixed in 1:2.44-1+deb11u1) forky: resolved (fixed in 1:2.66-4) sid: resolved (fixed in 1:2.66-4) trixie: resolved (fixed in 1:2.66-4)

CVE-2025-1390 [MEDIUM] CVE-2025-1390: libcap2 - The PAM module pam_cap.so of libcap configuration supports group names starting ... The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve loca

CVE-2011-4099 [MEDIUM] CVE-2011-4099: libcap2 - The capsh program in libcap before 2.22 does not change the current working dire... The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors. Scope: local bookworm: resolved (fixed in 1:2.22-1) bullseye: resolved (fixed in 1:2.22-1) forky: resolved (fixed in 1:2.22-1) sid: resolved (fixed in 1:2.22-1

CVE-2023-2602 [LOW] CVE-2023-2602: libcap2 - A vulnerability was found in the pthread_create() function in libcap. This issue... A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory. Scope: local bookworm: resolved (fixed in 1:2.66-4) bullseye: resolved (fixed in 1:2.44-1+deb11u1) forky: resolved (fixed in 1:2.66-4) sid: resolved (fixed in 1:2.66-4