Red Hat Security Advisory

RHSA-2026:34889

Red Hat Hardened Images RPMs Security Update

Released 2026-07-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images attr-2.6.0-1.hum1@aarch64, attr-2.6.0-1.hum1@src, attr-2.6.0-1.hum1@x86_64 +4

Fixes 1 record

TI-2026-39263 CVE-2026-54371 · GHSA-hh95-r7mj-c9j5

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

LOW 35

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during…

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00146 Published 2026-06-29 Partial fix · 2.6.0 CWE-59