5 matches found
CVE-2026-16313
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
CVE-2026-16313
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
SUSE-SU-2026:2691-1 Security update for sg3_utils
This update for sg3utils fixes the following issue Update to version 1.47+16.aad0b411: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823...