Ubuntu alert USN-8193-2 (libcap2)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8193-2] libcap vulnerability
Date:
             
 
Tue, 23 Jun 2026 20:56:18 +0000
Message-ID:
             
 
<E1wc8AM-00056l-Ba@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8193-2
June 23, 2026

libcap2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

libcap could be made to modify capabilities on arbitrary files.

Software Description:
- libcap2: POSIX 1003.1e capabilities library

Details:

USN-8193-1 fixed a vulnerability in libcap. This update provides the
corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

Original advisory details:

 Ali Raza discovered that libcap incorrectly handled file capability
 updates. A local attacker could possibly use this issue to inject or strip
 capabilities into arbitrary executables and escalate privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  libcap-dev                      1:2.32-1ubuntu0.2+esm1
                                  Available with Ubuntu Pro
  libcap2                         1:2.32-1ubuntu0.2+esm1
                                  Available with Ubuntu Pro
  libcap2-bin                     1:2.32-1ubuntu0.2+esm1
                                  Available with Ubuntu Pro
  libpam-cap                      1:2.32-1ubuntu0.2+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libcap-dev                      1:2.25-1.2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libcap2                         1:2.25-1.2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libcap2-bin                     1:2.25-1.2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libpam-cap                      1:2.25-1.2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libcap-dev                      1:2.24-12ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libcap2                         1:2.24-12ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libcap2-bin                     1:2.24-12ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libpam-cap                      1:2.24-12ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  libcap-dev                      1:2.24-0ubuntu2+esm2
                                  Available with Ubuntu Pro
  libcap2                         1:2.24-0ubuntu2+esm2
                                  Available with Ubuntu Pro
  libcap2-bin                     1:2.24-0ubuntu2+esm2
                                  Available with Ubuntu Pro
  libpam-cap                      1:2.24-0ubuntu2+esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8193-2
  https://ubuntu.com/security/notices/USN-8193-1
  CVE-2026-4878


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=jTHR
-----END PGP SIGNATURE-----