Red Hat Product Errata RHSA-2026:59380 - Security Advisory Issued: 2026-08-25 Updated: 2026-08-25 RHSA-2026:59380 - Security Advisory Overview Updated Packages Synopsis Moderate: attr security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for attr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2490283 - CVE-2026-54371 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVEs CVE-2026-54371 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM attr-2.6.0-1.el10_2.src.rpm SHA-256: 6b3f253d914bcf02b3379dce8bdb6b63c944e6a9c30f2d4bfab285aef81a3e02 x86_64 attr-2.6.0-1.el10_2.x86_64.rpm SHA-256: dfc5a5eb80be3540fbf64e6701f6cdcf2dd11d8a0e8384b88f8c210b1e7661f8 attr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 6d59c2f29c7cee2fa997263f6a8ef824a9b61ec8292e7c25e6a696a442c44bdd attr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 6d59c2f29c7cee2fa997263f6a8ef824a9b61ec8292e7c25e6a696a442c44bdd attr-debugsource-2.6.0-1.el10_2.x86_64.rpm SHA-256: 2d532bfba011df1e8eb3e8f4997bd6bf330c7dde1f720a876a22fee132d59371 attr-debugsource-2.6.0-1.el10_2.x86_64.rpm SHA-256: 2d532bfba011df1e8eb3e8f4997bd6bf330c7dde1f720a876a22fee132d59371 libattr-2.6.0-1.el10_2.x86_64.rpm SHA-256: 54955655d65785b1b1cccebccb47fa460c72741bc077b6aa8b41b0b406877939 libattr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 684dc2eba90505c7bc8913fbec3559c32fb39ed15c62dbe1223a83d54a972e2f libattr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 684dc2eba90505c7bc8913fbec3559c32fb39ed15c62dbe1223a83d54a972e2f libattr-devel-2.6.0-1.el10_2.x86_64.rpm SHA-256: f2067cee265575f9a7ef86428e84b9506ed6126cf015646cc8e1447a017d94a7 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM attr-2.6.0-1.el10_2.src.rpm SHA-256: 6b3f253d914bcf02b3379dce8bdb6b63c944e6a9c30f2d4bfab285aef81a3e02 x86_64 attr-2.6.0-1.el10_2.x86_64.rpm SHA-256: dfc5a5eb80be3540fbf64e6701f6cdcf2dd11d8a0e8384b88f8c210b1e7661f8 attr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 6d59c2f29c7cee2fa997263f6a8ef824a9b61ec8292e7c25e6a696a442c44bdd attr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 6d59c2f29c7cee2fa997263f6a8ef824a9b61ec8292e7c25e6a696a442c44bdd attr-debugsource-2.6.0-1.el10_2.x86_64.rpm SHA-256: 2d532bfba011df1e8eb3e8f4997bd6bf330c7dde1f720a876a22fee132d59371 attr-debugsource-2.6.0-1.el10_2.x86_64.rpm SHA-256: 2d532bfba011df1e8eb3e8f4997bd6bf330c7dde1f720a876a22fee132d59371 libattr-2.6.0-1.el10_2.x86_64.rpm SHA-256: 54955655d65785b1b1cccebccb47fa460c72741bc077b6aa8b41b0b406877939 libattr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 684dc2eba90505c7bc8913fbec3559c32fb39ed15c62dbe1223a83d54a972e2f libattr-debuginfo-2.6.0-1.el10_2.x86_64.rpm SHA-256: 684dc2eba90505c7bc8913fbec3559c32fb39ed15c62dbe1223a83d54a972e2f libattr-devel-2.6.0-1.el10_2.x86_64.rpm SHA-256: f2067cee265575f9a7ef86428e84b9506ed6126cf015646cc8e1447a017d94a7 Red Hat Enterprise Linux for IBM z Systems 10 SRPM attr-2.6.0-1.el10_2.src.rpm SHA-256: 6b3f253d914bcf02b3379dce8bdb6b63c944e6a9c30f2d4bfab285aef81a3e02 s390x attr-2.6.0-1.el10_2.s390x.rpm SHA-256: e9bbfba0113519f125ffd01872cf735ea28354b592ae76e26175280e3f0012a7 attr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: cda859f13251df4e34723e364f96a2155fb115837e422224badf72603d925ad1 attr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: cda859f13251df4e34723e364f96a2155fb115837e422224badf72603d925ad1 attr-debugsource-2.6.0-1.el10_2.s390x.rpm SHA-256: 959d98577ca3a78d49aca6464a3b53f3fd3750de8235b46f38ed4832dc96f791 attr-debugsource-2.6.0-1.el10_2.s390x.rpm SHA-256: 959d98577ca3a78d49aca6464a3b53f3fd3750de8235b46f38ed4832dc96f791 libattr-2.6.0-1.el10_2.s390x.rpm SHA-256: 6ac0bee96e2f4c80e4749e0ac3fd73b9a760791c0a06f1633dacef7cf541eded libattr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: 4e0062883514d95c6a76d9ac1b557880da2ef62e848af947c22cb4e98dd5f087 libattr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: 4e0062883514d95c6a76d9ac1b557880da2ef62e848af947c22cb4e98dd5f087 libattr-devel-2.6.0-1.el10_2.s390x.rpm SHA-256: 60db1bf13b49a7b5a8bbff2990985923e2f10f46244ae71776b4545bca07ff79 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM attr-2.6.0-1.el10_2.src.rpm SHA-256: 6b3f253d914bcf02b3379dce8bdb6b63c944e6a9c30f2d4bfab285aef81a3e02 s390x attr-2.6.0-1.el10_2.s390x.rpm SHA-256: e9bbfba0113519f125ffd01872cf735ea28354b592ae76e26175280e3f0012a7 attr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: cda859f13251df4e34723e364f96a2155fb115837e422224badf72603d925ad1 attr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: cda859f13251df4e34723e364f96a2155fb115837e422224badf72603d925ad1 attr-debugsource-2.6.0-1.el10_2.s390x.rpm SHA-256: 959d98577ca3a78d49aca6464a3b53f3fd3750de8235b46f38ed4832dc96f791 attr-debugsource-2.6.0-1.el10_2.s390x.rpm SHA-256: 959d98577ca3a78d49aca6464a3b53f3fd3750de8235b46f38ed4832dc96f791 libattr-2.6.0-1.el10_2.s390x.rpm SHA-256: 6ac0bee96e2f4c80e4749e0ac3fd73b9a760791c0a06f1633dacef7cf541eded libattr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: 4e0062883514d95c6a76d9ac1b557880da2ef62e848af947c22cb4e98dd5f087 libattr-debuginfo-2.6.0-1.el10_2.s390x.rpm SHA-256: 4e0062883514d95c6a76d9ac1b557880da2ef62e848af947c22cb4e98dd5f087 libattr-devel-2.6.0-1.el10_2.s390x.rpm SHA-256: 60db1bf13b49a7b5a8bbff2990985923e2f10f46244ae71776b4545bca07ff79 Red Hat Enterprise Linux for Power, little endian 10 SRPM attr-2.6.0-1.el10_2.src.rpm SHA-256: 6b3f253d914bcf02b3379dce8bdb6b63c944e6a9c30f2d4bfab285aef81a3e02 ppc64le attr-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 911ef51b551bc83d505923ecc21629a986bfb1286b9dd5b034b7da3f8dd1bfbc attr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 9b4e031aaec40b50859d2ea4947e5d52535441978b6e876c56321ecb81d0adcd attr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 9b4e031aaec40b50859d2ea4947e5d52535441978b6e876c56321ecb81d0adcd attr-debugsource-2.6.0-1.el10_2.ppc64le.rpm SHA-256: a0343bb9f1aaa76af0304a1197622d901c379e118dc0315196553ffb6444d7c2 attr-debugsource-2.6.0-1.el10_2.ppc64le.rpm SHA-256: a0343bb9f1aaa76af0304a1197622d901c379e118dc0315196553ffb6444d7c2 libattr-2.6.0-1.el10_2.ppc64le.rpm SHA-256: ae7797cc75b27b04ae15d29a179a6d5728964decfc5ecda885cc0c630fd6ea9d libattr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: b4cab19720f11cfdae8e2810e6c360888934304c00e3cc065885e73efb37a459 libattr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: b4cab19720f11cfdae8e2810e6c360888934304c00e3cc065885e73efb37a459 libattr-devel-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 3aa8a7a96ffcab4d229e57ef75c9ccba3df4e6db6c5304d379f770e02a449392 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM attr-2.6.0-1.el10_2.src.rpm SHA-256: 6b3f253d914bcf02b3379dce8bdb6b63c944e6a9c30f2d4bfab285aef81a3e02 ppc64le attr-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 911ef51b551bc83d505923ecc21629a986bfb1286b9dd5b034b7da3f8dd1bfbc attr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 9b4e031aaec40b50859d2ea4947e5d52535441978b6e876c56321ecb81d0adcd attr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 9b4e031aaec40b50859d2ea4947e5d52535441978b6e876c56321ecb81d0adcd attr-debugsource-2.6.0-1.el10_2.ppc64le.rpm SHA-256: a0343bb9f1aaa76af0304a1197622d901c379e118dc0315196553ffb6444d7c2 attr-debugsource-2.6.0-1.el10_2.ppc64le.rpm SHA-256: a0343bb9f1aaa76af0304a1197622d901c379e118dc0315196553ffb6444d7c2 libattr-2.6.0-1.el10_2.ppc64le.rpm SHA-256: ae7797cc75b27b04ae15d29a179a6d5728964decfc5ecda885cc0c630fd6ea9d libattr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: b4cab19720f11cfdae8e2810e6c360888934304c00e3cc065885e73efb37a459 libattr-debuginfo-2.6.0-1.el10_2.ppc64le.rpm SHA-256: b4cab19720f11cfdae8e2810e6c360888934304c00e3cc065885e73efb37a459 libattr-devel-2.6.0-1.el10_2.ppc64le.rpm SHA-256: 3aa8a7a96ffcab4d229e57ef75c9ccba3df4e6db6c5304d379f770e02a449392 Re