Release date:
2026-07-29 17:42:17 UTC
Description:
- CVE-2026-54371: symlink traversal in the recursive directory walk of
getfattr, letting a local attacker who controls a path component swap it
for a symlink and redirect extended-attribute reads to arbitrary files
Updated packages:
-
attr-2.4.48-3.el8.tuxcare.els1.x86_64.rpm
sha:1856d248e07c80c65928e9a218f85ca3cef0091112b23169827e32b6b883b646
-
libattr-2.4.48-3.el8.tuxcare.els1.i686.rpm
sha:25405333f4c2df32d5b068a352d38828d2bfb9023a624071a5847b5a2fb80266
-
libattr-2.4.48-3.el8.tuxcare.els1.x86_64.rpm
sha:79630aaec7fbf08ad82256e69c424540776d3b959fb7c4b5f01cafc536bb9a2d
-
libattr-devel-2.4.48-3.el8.tuxcare.els1.i686.rpm
sha:035cdee506f26ba676dd695dba57c52485bde0a0410360bb26e238ff3edb3951
-
libattr-devel-2.4.48-3.el8.tuxcare.els1.x86_64.rpm
sha:223dbdba8d8281c452159f8da5d1bf352216aba8151a1e484b991fa43f5bb501
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
