Summary
The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects.
Security Fix(es):
* attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | attr | 2.6.0-1.el8_10 |
| AlmaLinux · 8 | libattr | 2.6.0-1.el8_10 |
| AlmaLinux · 8 | libattr-devel | 2.6.0-1.el8_10 |
Vulnerabilities 1
-
High 7.1
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attacke…