RHSA-2026:50142 Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

Bulletin has no description...

CVE-2026-16313

Affects sg3_utils: the sg_inq --export output exposes un sanitized SCSI name string fields, allowing a newline in device-supplied names to inject udev properties. This could enable a crafted SCSI device to execute arbitrary commands as root when the device is disconnected. Documents do not specif...

PT-2026-65529

Name of the Vulnerable Software and Affected Versions sg3 utils affected versions not specified Description A flaw exists in the sg inq command when used with the --export option. The utility fails to sanitize control characters within SCSI name string fields. An attacker providing a specially...

SUSE-SU-2026:2689-1 Security update for sg3_utils

This update for sg3utils fixes the following issue Update to version 1.43+49.47792c16: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...

SUSE-SU-2026:2688-1 Security update for sg3_utils

This update for sg3utils fixes the following issue - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...