[CLSA-2026:1788364105] sg3_utils: Fix of CVE-2026-16313
Type:
security
Severity:
Important
Release date:
2026-09-02 15:48:37 UTC
Description:
- CVE-2026-16313: escape udev non-conforming characters in the VPD 0x83 SCSI name string designator and the T10 vendor ID ATA subfield printed by sg_inq --export
CVEs fixed:
Updated packages:
  • sg3_utils-1.47-9.el9.tuxcare.els1.x86_64.rpm
    sha:ea3d71e2e9a7e7c950e1d672dc34c6688fe88e1689f0f6cd7a5d32b9147c4b5b
  • sg3_utils-devel-1.47-9.el9.tuxcare.els1.i686.rpm
    sha:08e0f50752511cea0c5b502a29dca2752e6769bb7eef573bd9c7aac0ac901269
  • sg3_utils-devel-1.47-9.el9.tuxcare.els1.x86_64.rpm
    sha:f6be42ac74ef71b173eff24dc08457ad7a62f65b4aac16654f690a6f9eecc87e
  • sg3_utils-libs-1.47-9.el9.tuxcare.els1.i686.rpm
    sha:4d85d613ffb005f68f8621778030727d6c0e3710bbfb208b64a1f74918d87748
  • sg3_utils-libs-1.47-9.el9.tuxcare.els1.x86_64.rpm
    sha:a20554d0032092845502ece870d205d9456d62722e289f1d8e92d2459080b62b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.