17 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.32 bug fix and security update
Red Hat OpenShift Container Platform release 4.21.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update
An update for sg3utils is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Important: Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update
An update for sg3utils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Important: sg3_utils
Issue Overview: A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary propertie...
OESA-2026-3244 sg3_utils security update
The sg3utils package contains utilities that send SCSI commands to devices. As well as devices on transports traditionally associated with SCSI e.g. Fibre Channel FCP, Serial Attached SCSI SAS and the SCSI Parallel InterfaceSPI many other devices use SCSI command sets. ATAPI cd/dvd drives and SAT...
RLSA-2026:50141 Important: sg3_utils security, bug fix, and enhancement update
The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes: sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output...
RockyLinux 9 : sg3_utils (RLSA-2026:50141)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50141 advisory. sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output conformance...
RockyLinux 10 : sg3_utils (RLSA-2026:50142)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50142 advisory. sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output conformanc...
Important: sg3_utils security, bug fix, and enhancement update
The sg3utils packages provide command-line utilities for devices that use the Small Computer System Interface SCSI command sets. Security Fixes: sg3utils: sg3utils: arbitrary command execution via udev property injection in sginq --export CVE-2026-16313 Bug Fixes and Enhancements: sginq output...
Linux Distros Unpatched Vulnerability : CVE-2026-16313
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters...
CVE-2026-16313
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
CVE-2026-16313
Affects sg3_utils: the sg_inq --export output exposes un sanitized SCSI name string fields, allowing a newline in device-supplied names to inject udev properties. This could enable a crafted SCSI device to execute arbitrary commands as root when the device is disconnected. Documents do not specif...
CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
CVE-2026-16313
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
AZL-89378 CVE-2026-50292 affecting package libinput for versions less than 1.25.0-2
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root code execution...