Red Hat Security Advisory

RHSA-2026:56133

attr security update

Released 2026-08-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) attr-2.6.0-1.el8_10, libattr-2.6.0-1.el8_10, libattr-devel-2.6.0-1.el8_10

Fixes 1 record

TI-2026-39263 CVE-2026-54371 · GHSA-hh95-r7mj-c9j5

attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

LOW 35

attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during…

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00146 Published 2026-06-29 Partial fix · 2.6.0 CWE-59