Skip to content
OpenAdvisories
Medium ELSA-2026-59380 1 CVE

Moderate: attr security update (Oracle Linux 10)

Published Aug 25, 2026 · Updated Aug 25, 2026

Ecosystem: Oracle Linux

Summary

[2.6.0-1]
- rebase to 2.6.0 to fix the following CVEs:
- CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186128)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 attr 0:2.6.0-1.el10_2
Oracle Linux · 10 libattr 0:2.6.0-1.el10_2
Oracle Linux · 10 libattr-devel 0:2.6.0-1.el10_2

Vulnerabilities 1

  • High 7.1
    CVE-2026-54371

    attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

    attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attacke…

    attr project attr acl attr Debian Ubuntu Azure Linux