https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:33:43 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:56133 <p><strong>Affected:</strong> AlmaLinux:8: attr, AlmaLinux:8: libattr, AlmaLinux:8: libattr-devel</p> <p>The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects.</p> <p>Security Fix(es):</p> <p>* attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: attr, AlmaLinux:8: libattr, AlmaLinux:8: libattr-devel</p> <p>The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects.</p> <p>Security Fix(es):</p> <p>* attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:56133 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1249 certfr-2026-avi-1249 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1249 https://cve.radiocsirt.org/vuln/euvd-2026-366750 EUVD-2026-366750 https://cve.radiocsirt.org/vuln/euvd-2026-366750 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54371 <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.</p> <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54371 https://cve.radiocsirt.org/vuln/ghsa-hh95-r7mj-c9j5 <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.</p> <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.</p> https://cve.radiocsirt.org/vuln/ghsa-hh95-r7mj-c9j5 https://cve.radiocsirt.org/vuln/msrc_cve-2026-54371 msrc_CVE-2026-54371 https://cve.radiocsirt.org/vuln/msrc_cve-2026-54371 https://cve.radiocsirt.org/vuln/oesa-2026-2913 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: attr</p> <p>A set of tools for manipulating extended attributes on file system objects, in particular getfattr(1) and setfattr(1). An attr(1) command is also provided, which is largely compatible with the SGI IRIX tool of the same name. Security Fix(es):</p> <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.(CVE-2026-54371)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: attr</p> <p>A set of tools for manipulating extended attributes on file system objects, in particular getfattr(1) and setfattr(1). An attr(1) command is also provided, which is largely compatible with the SGI IRIX tool of the same name. Security Fix(es):</p> <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.(CVE-2026-54371)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2913 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11312-1 <p>acl-2.4.0-1.1 on GA media</p> <p>acl-2.4.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11312-1 https://cve.radiocsirt.org/vuln/rhsa-2026:34889 <p>attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr</p> <p>attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr</p> https://cve.radiocsirt.org/vuln/rhsa-2026:34889 https://cve.radiocsirt.org/vuln/rlsa-2026:56133 <p><strong>Affected:</strong> Rocky Linux:8: attr</p> <p>The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects.</p> <p>Security Fix(es):</p> <p>* attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: attr</p> <p>The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects.</p> <p>Security Fix(es):</p> <p>* attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:56133 https://cve.radiocsirt.org/vuln/suse-su-2026:23670-1 <p>Security update for acl, attr</p> <p>Security update for acl, attr</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23670-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54371 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: attr, Ubuntu:Pro:16.04:LTS: attr, Ubuntu:Pro:18.04:LTS: attr, Ubuntu:Pro:20.04:LTS: attr, Ubuntu:22.04:LTS: attr, Ubuntu:24.04:LTS: attr, Ubuntu:25.10: attr, Ubuntu:26.04:LTS: attr</p> <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: attr, Ubuntu:Pro:16.04:LTS: attr, Ubuntu:Pro:18.04:LTS: attr, Ubuntu:Pro:20.04:LTS: attr, Ubuntu:22.04:LTS: attr, Ubuntu:24.04:LTS: attr, Ubuntu:25.10: attr, Ubuntu:26.04:LTS: attr</p> <p>attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54371 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2920 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (attr) ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (attr) ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2920