attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...

attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...

RHEL 10 : attr (RHSA-2026:59380)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59380 advisory. The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists,...

Fedora 43 : attr (2026-b85570f8e4)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b85570f8e4 advisory. rebase to v2.6.0 to fix CVE-2026-54371 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 44 : attr (2026-daa458d11d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-daa458d11d advisory. rebase to v2.6.0 to fix CVE-2026-54371 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: attr: attr-2.6.0-9.1.hum1 aarch64, x8664 libattr-2.6.0-9.1.hum1 aarch64, x8664 libattr-devel-2.6.0-9.1.hum1 aarch64, x8664 attr-2.6.0-9.1.hum1.src src Security Fixes: attr: CVE-2026-54371...

MAL-2025-34764 Malicious code in test-attr (npm)

The package test-attr was found to contain malicious code...

new packages: attr

An update is available for attr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...