Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

RHEL 9 : acl (RHSA-2026:67144)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67144 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfac...

RHEL 10 : acl (RHSA-2026:64805)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64805 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfa...

ROOT-OS-DEBIAN-12-CVE-2026-54369 CVE-2026-54369 in acl - Patched by Root

Root has patched CVE-2026-54369 in the acl package for Root:Debian:12. Multiple fixed versions available...

MiracleLinux 9 : acl-2.4.0-1.el9_8 (AXSA:2026-1529:02)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1529:02 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370...

Photon OS 5.0: Acl PHSA-2026-5.0-92-0946

An update of the acl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 8 : acl-2.4.0-1.el8 (AXSA:2026-1434:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1434:01 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370...

Amazon Linux 2 : acl, --advisory ALAS2-2026-3831 (ALAS-2026-3831)

The version of acl installed on the remote host is prior to 2.2.51-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3831 advisory. A flaw was found in the acl component, specifically within its libacl pathname-based functions. A local attacker could exploit this...

acl security update

An update is available for acl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Access Control Lists ACLs are used to define fine-grained discretionary access...

AlmaLinux 8 : acl (ALSA-2026:43420)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:43420 advisory. acl: Symlink traversal privilege escalation via libacl functions CVE-2026-54369 acl: TOCTOU Symlink Traversal via getfacl/setfacl CVE-2026-54370 Tenable...

acl security update

2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186111 - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl RHEL-186216...

Important: Red Hat Security Advisory: acl security update

An update for acl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Oracle Linux 9 : acl (ELSA-2026-42736)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42736 advisory. 2.4.0-1 - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions RHEL-186111 -...

OESA-2026-3079 acl security update

This package contains commands for manipulating POSIX access control lists, and the libacl.so dynamic library which contains the POSIX 1003.1e draft standard 17 functions for manipulating access control lists. Security Fixes: acl before version 2.4.0 contains a symlink traversal vulnerability in...

Fedora 44 : acl (2026-6b9a652463)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6b9a652463 advisory. rebase to v2.4.0 to fix CVE-2026-54369 and CVE-2026-54370 Resolves: CVE-2026-54369 Resolves: CVE-2026-54370 Tenable has extracted the preceding...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: acl: acl-2.4.0-0.1.hum1 aarch64, x8664 libacl-2.4.0-0.1.hum1 aarch64, x8664 libacl-devel-2.4.0-0.1.hum1 aarch64, x8664 acl-2.4.0-0.1.hum1.src src Security Fixes: acl: CVE-2026-54369 CVE-2026-5437...

CVE-2026-54369 affecting package acl for versions less than 2.4.0-1

CVE-2026-54369 affecting package acl for versions less than 2.4.0-1. A patched version of the package is available...

UBUNTU-CVE-2026-54369

acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile, aclextendedfile, and acldeletedeffile that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who contr...