| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libcap2 | Distribution: openSUSE Tumbleweed |
| Version: 2.78 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri Apr 10 14:37:49 2026 |
| Group: System/Libraries | Build host: reproducible |
| Size: 67588 | Source RPM: libcap-2.78-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://sites.google.com/site/fullycapable/ | |
| Summary: Library for Capabilities (linux-privs) Support | |
Capabilities are a measure to limit the omnipotence of the superuser. Currently a program started by root or setuid root has the power to do anything. Capabilities (Linux-Privs) provide a more fine-grained access control. Without kernel patches, you can use this library to drop capabilities within setuid binaries. If you use patches, this can be done automatically by the kernel.
BSD-3-Clause OR GPL-2.0-only
* Fri Apr 10 2026 Marcus Meissner <meissner@suse.com>
- updated to 2.78
- Fix a potential TOCTOU race condition in cap_set_file(). (CVE-2026-4878 bsc#1261809).
- Fix a typo in a capset error (reported and fixed by Edward Nolan).
- updated to 2.77
- Fix mistakes in setcap for reporting errors: report them with the appropriate filename.
- Fix bug in cap.GetIAB()
- Improve libcap managed memory allocation and support CHERI RISC-V.
- Add C++ support to the run a .so file as an executable mechanism employed by libcap.so, libpsx.so and pam_cap.so.
- updated to 2.76
- More libpsx and psx Go package mechanism fixes.
- Address an arm64 (aarch64) libpsx issue seen with Tracee.
- To make the various .so files continue to be runnable as standalone programs added another workaround for glibc.
- _IO_stdin_used needs to be weakly defined to make puts() and friends work. Also updated the Stackoverflow answer to include that detail.
- new man page cap_text_formats(7).
- Removed a spurious debugging printf() from setcap tool.
- Removed cap_ workarounds for go.dev cap package examples. The website bugs have been resolved: go/issues/70611; go/issues/70630.
- Added a Makefile to the contrib/seccomp example.
* Thu Oct 16 2025 Callum Farmer <gmbr3@opensuse.org>
- Move utils to bindir and then provide symlinks under sbindir
as needed by Steam (bsc#1252129)
* Sun Mar 23 2025 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.2.75:
* go related fixes
- includes changes from 1.2.74:
* Group syntax parsing bugfix for pam_cap
* Doc typo fix for cap_get_proc.3
* Fix transitive include in capsh.c
* go related changes
* Mon Dec 09 2024 Andreas Schwab <schwab@suse.de>
- Disable psx_test and b219174 tests in qemu emulation
* Mon Dec 02 2024 Petr Vorel <pvorel@suse.cz>
- update to 2.73:
* https://sites.google.com/site/fullycapable/release-notes-for-libcap?authuser=0#h.7yd7ab9ppagk
* Sat May 25 2024 Andreas Stieger <andreas.stieger@gmx.de>
- update to 2.70:
* setcap changes to make it harder to set invalid file capabilities
* Lots of documentation fixes
* Fix c89 compilation syntax for the C code in the libraries
* libpam has deprecated providing the _pam_overwrite() function,
so use memset() instead
* Tue May 16 2023 Marcus Meissner <meissner@suse.com>
- updated to 2.69
- An audit was performed on libcap and friends by https://x41-dsec.de/ (blog) . The audit (final report, 2023-05-10) was sponsored by the the Open Source Technology Improvement Fund, https://ostif.org/ (blog). Five issues were found. Four of them are addressed in this release. Each issue was labeled in the audit results as follows:
- LCAP-CR-23-01 (SEVERITY) LOW (CVE-2023-2602) - found by David Gstir (bsc#1211418)
- LCAP-CR-23-02 (SEVERITY) MEDIUM (CVE-2023-2603) - found by Richard Weinberger (bsc#1211419)
- LCAP-CR-23-100 (SEVERITY) NONE
- LCAP-CR-23-101 (SEVERITY) NONE
- LCAP-CR-23-102 (SEVERITY) NONE
- Man page style improvement from Emanuele Torre
* Thu Mar 30 2023 Dirk Müller <dmueller@suse.com>
- update to 2.68:
* Force libcap internal functions to be hidden outside the library
* Expanded the list of man page (links) to all of the supported API
functions.
* fixed some formatting issues with the libpsx(3) manpage.
* Add support for a markdown preamble and postscript when generating
.md versions of the man pages (Bug 217007)
* psx package clean up
* fix some copy-paste errors with TestShared()
* added a more complete psx testing into this test as well
* cap package clean up
* drop an unnecessary use of ", _" in the sources
* cleaned up cap.NamedCount documentation
* Converted goapps/web/README to .md format and fixed the
instructions to indicate go mod tidy is needed.
* cap_compare test binary now cleans up after itself (Bug 217018)
* Figured out how to cross compile Go programs for arm (i.e. RPi) that
use C code, don't use cgo but do use the psx package
* Eliminate use of vendor directory
* Fri Mar 24 2023 Martin Liška <mliska@suse.cz>
- Enable LTO and add missing -ffat-lto-objects for the provided
static libs.
* Fri Mar 24 2023 Takashi Iwai <tiwai@suse.com>
- Revert LTO again; it still breaks builds
* Thu Mar 23 2023 Martin Liška <mliska@suse.cz>
- Enable LTO as it works fine.
* Sat Feb 04 2023 Dirk Müller <dmueller@suse.com>
- update to 2.67:
* Replace use of fgrep with grep -F (POSIX grep flags preferred by
GNU grep) - patch from David Seifert.
* Added SPDX identifiers to License file(s). Hopefully this will
help the various robots out there correctly identify the
longstanding licenses for libcap and friends. (Bug: 216609
reported by Günther Noack)
* Started down the rabbit hole of trying to address (Bug: 216610
reported by Günther Noack on behalf of Michael Stapelberg)
* The basic issue is how to link C code with Go psx without using
CGo. This is all a low level hackery. If you are interested,
browse the source.
* Correct for bad whatis entries in man pages (this was throwing a
Debian build test, detail)
* Also reviewed man pages and addressed cross linkage issues (Bug:
* Cleaned up some README.md files (made a github mirror now just so
I can automatically render them).
* Changed meaning of DYNAMIC=no builds.
This now builds everything with static linking except for libc.
The reason for this exception is explained in the commit message.
* Inserted demonstration exploit code in capso.so to support
article.
/usr/lib64/libcap.so.2 /usr/lib64/libcap.so.2.78 /usr/share/licenses/libcap2 /usr/share/licenses/libcap2/License
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Apr 21 22:32:08 2026