RHSA-2026:50142 Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

Bulletin has no description...

CVE-2026-16313

Affects sg3_utils: the sg_inq --export output exposes un sanitized SCSI name string fields, allowing a newline in device-supplied names to inject udev properties. This could enable a crafted SCSI device to execute arbitrary commands as root when the device is disconnected. Documents do not specif...

Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.44763+23.769c9b5b: sginq: --export output conformance for SCSI name string and ATA fields bsc1267823. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.43+49.47792c16: sginq: --export output conformance for SCSI name string and ATA fields bsc1267823. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:2689-1 Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.43+49.47792c16: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

SUSE-SU-2026:2688-1 Security update for sg3_utils

This update for sg3utils fixes the following issue - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

PT-2026-57136

This update for sg3 utils fixes the following issue Update to version 1.44763+23.769c9b5b: - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

PT-2026-57134

This update for sg3 utils fixes the following issue - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

PT-2026-57135

This update for sg3 utils fixes the following issue Update to version 1.43+49.47792c16: - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

PT-2026-55957

This update for sg3 utils fixes the following issue - sg inq: --export output conformance for SCSI name string and ATA fields bsc1267823...

PT-2026-65529

Name of the Vulnerable Software and Affected Versions sg3 utils affected versions not specified Description A flaw exists in the sg inq command when used with the --export option. The utility fails to sanitize control characters within SCSI name string fields. An attacker providing a specially...