Skip to main content
VulnerabilityPublished Updated

SUSE · Security update for sg3_utils

Affects SUSESource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 26 Oct 2026, 16:19 UTC

What to do

Affected software

ProductAffectedFixed in
SUSE Product Security Team SUSEAffected
  • SUSE
  • aarch64
  • libsgutils-devel-1.48~20221101+7.f75279c0-160000.1.1.aarch64
  • libsgutils2-1_48-2-1.48~20221101+7.f75279c0-160000.1.1.aarch64
  • sg3_utils-1.48~20221101+7.f75279c0-160000.1.1.aarch64
  • libsgutils-devel-0:1.48~20221101+7.f75279c0-160000.1.1.aarch64
  • libsgutils2-1_48-2-0:1.48~20221101+7.f75279c0-160000.1.1.aarch64
  • sg3_utils-0:1.48~20221101+7.f75279c0-160000.1.1.aarch64
Fixed in–

AI-suggested

A security update is available for sg3_utils that addresses these issues. Users should apply the update from the SUSE Product Security Team to remediate the problems. No additional mitigation steps are indicated.

Description

A security update for the sg3_utils package addresses issues related to SCSI name string and ATA field output conformance in the sg_inq tool and quoting of $id_serial in the rescan-scsi-bus.sh script's findmultipath call. These fixes improve the correctness and reliability of these utilities.

References

Community reviews

Loading reviews…