RLSA-2026:59380 Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...

RHSA-2026:59380 Red Hat Security Advisory: attr security update

Bulletin has no description...

attr security update

2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186121...

ALSA-2026:60226 Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...

AlmaLinux 10 : attr (ALSA-2026:59380)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:59380 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

RockyLinux 10 : attr (RLSA-2026:59380)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:59380 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...

RHEL 9 : attr (RHSA-2026:60226)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:60226 advisory. The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, ...

Oracle Linux 10 : attr (ELSA-2026-59380)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59380 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128 Tenable has extracted...

Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...

Moderate: Red Hat Security Advisory: attr security update

An update for attr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...

SUSE CVE-2026-74414

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Remove the duplicate attr inode dirty marking action Syzbot reported a null-ptr-deref in 1. If the attributes file is not loaded during system mount, a trigger occurs 1 when setxattr is executed in userspace. Remove the...

attr security update

2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128...

ALSA-2026:59380 Moderate: attr security update

The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fixes: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 For more details about...

RHEL 10 : attr (RHSA-2026:59380)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59380 advisory. The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists,...

Unity Linux 20.1070a Security Update: attr (UTSA-2026-102708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102708 advisory. attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by...

ROOT-OS-DEBIAN-11-CVE-2026-54371 CVE-2026-54371 in attr - Patched by Root

Root has patched CVE-2026-54371 in the attr package for Root:Debian:11. Multiple fixed versions available...

acl, attr: Multiple vulnerabilities

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Multiple vulnerabilities have been discovered in acl and attr. Please review the CVE identifiers referenced below for details. Impact Please review the referenced C...

GLSA-202608-20 : acl, attr: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-20 acl, attr: Multiple vulnerabilities Multiple vulnerabilities have been discovered in acl and attr. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

CLSA-2026-1787146803 attr: Fix of CVE-2026-54371

Rebase to attr-2.6.0; CVE-2026-54371 fixed upstream - setfattr: new -P/--physical option; --restore is symlink-safe only with -P - setfattr --restore now warns on stderr when -P/-h are absent - getfattr -Rh now recurses through a symlink argument previously no output...