Red Hat Product Errata RHSA-2026:60226 - Security Advisory Issued: 2026-08-26 Updated: 2026-08-26 RHSA-2026:60226 - Security Advisory Overview Updated Packages Synopsis Moderate: attr security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for attr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The attr packages provide extended attributes, which can be used to store system objects like capabilities of executables and access control lists, as well as user objects. Security Fix(es): attr: Symlink Traversal Privilege Escalation via getfattr and setfattr (CVE-2026-54371) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2490283 - CVE-2026-54371 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVEs CVE-2026-54371 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM attr-2.6.0-1.el9_8.src.rpm SHA-256: 9bdd2e605e0ddc9818382bd95644594fa8b8eedfe08048303093db13cde9963c x86_64 attr-2.6.0-1.el9_8.x86_64.rpm SHA-256: 80ae38186d5639729e127c0b4fea589b3f979d7ebe6aabbf0cd708d0bd37ad14 attr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: dda1b342bd2515375367df0e191bab1099b4c6030874e14dc2c942b10c38b8ad attr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: dda1b342bd2515375367df0e191bab1099b4c6030874e14dc2c942b10c38b8ad attr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: 386f7c3674268c05150556353f8f3f07ef4c771ca719b5b426e32f1fd8f13755 attr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: 386f7c3674268c05150556353f8f3f07ef4c771ca719b5b426e32f1fd8f13755 attr-debugsource-2.6.0-1.el9_8.i686.rpm SHA-256: 763630ae013881cf1b5e6639f852fb56c25e3b6fca5a9577b6553a2285442bd6 attr-debugsource-2.6.0-1.el9_8.i686.rpm SHA-256: 763630ae013881cf1b5e6639f852fb56c25e3b6fca5a9577b6553a2285442bd6 attr-debugsource-2.6.0-1.el9_8.x86_64.rpm SHA-256: 4ddeb8872df6aae29e3d1e2ec885ff35173f1d2169b63fc44b07e66ced529e9f attr-debugsource-2.6.0-1.el9_8.x86_64.rpm SHA-256: 4ddeb8872df6aae29e3d1e2ec885ff35173f1d2169b63fc44b07e66ced529e9f libattr-2.6.0-1.el9_8.i686.rpm SHA-256: af084994ac4760db9444a019cf7b2d38cd48d5d5dc8b79495cfb33c2b074ed82 libattr-2.6.0-1.el9_8.x86_64.rpm SHA-256: 9e37537f690c748f7f05faa80966072f118ec722e38ef332fe19cf22b087349f libattr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: 0a49b20873319e6f9d6e7c3bc985b2199ed2d582ab2d1bbb5753c5981863a87f libattr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: 0a49b20873319e6f9d6e7c3bc985b2199ed2d582ab2d1bbb5753c5981863a87f libattr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: e4f77c3a9b69c652fc3c43789f361e052eaf91bb035e1859bfba5b7dfa5184e0 libattr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: e4f77c3a9b69c652fc3c43789f361e052eaf91bb035e1859bfba5b7dfa5184e0 libattr-devel-2.6.0-1.el9_8.i686.rpm SHA-256: 1e17c748094610cf7df4434988f53854b8f2c5bc0bbe6bc30c7d476ddea3f618 libattr-devel-2.6.0-1.el9_8.x86_64.rpm SHA-256: 0ee8d7ae8b2502e1e6baab12886741abc2dde9eef72d6997a8a4eb11583581b5 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM attr-2.6.0-1.el9_8.src.rpm SHA-256: 9bdd2e605e0ddc9818382bd95644594fa8b8eedfe08048303093db13cde9963c x86_64 attr-2.6.0-1.el9_8.x86_64.rpm SHA-256: 80ae38186d5639729e127c0b4fea589b3f979d7ebe6aabbf0cd708d0bd37ad14 attr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: dda1b342bd2515375367df0e191bab1099b4c6030874e14dc2c942b10c38b8ad attr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: dda1b342bd2515375367df0e191bab1099b4c6030874e14dc2c942b10c38b8ad attr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: 386f7c3674268c05150556353f8f3f07ef4c771ca719b5b426e32f1fd8f13755 attr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: 386f7c3674268c05150556353f8f3f07ef4c771ca719b5b426e32f1fd8f13755 attr-debugsource-2.6.0-1.el9_8.i686.rpm SHA-256: 763630ae013881cf1b5e6639f852fb56c25e3b6fca5a9577b6553a2285442bd6 attr-debugsource-2.6.0-1.el9_8.i686.rpm SHA-256: 763630ae013881cf1b5e6639f852fb56c25e3b6fca5a9577b6553a2285442bd6 attr-debugsource-2.6.0-1.el9_8.x86_64.rpm SHA-256: 4ddeb8872df6aae29e3d1e2ec885ff35173f1d2169b63fc44b07e66ced529e9f attr-debugsource-2.6.0-1.el9_8.x86_64.rpm SHA-256: 4ddeb8872df6aae29e3d1e2ec885ff35173f1d2169b63fc44b07e66ced529e9f libattr-2.6.0-1.el9_8.i686.rpm SHA-256: af084994ac4760db9444a019cf7b2d38cd48d5d5dc8b79495cfb33c2b074ed82 libattr-2.6.0-1.el9_8.x86_64.rpm SHA-256: 9e37537f690c748f7f05faa80966072f118ec722e38ef332fe19cf22b087349f libattr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: 0a49b20873319e6f9d6e7c3bc985b2199ed2d582ab2d1bbb5753c5981863a87f libattr-debuginfo-2.6.0-1.el9_8.i686.rpm SHA-256: 0a49b20873319e6f9d6e7c3bc985b2199ed2d582ab2d1bbb5753c5981863a87f libattr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: e4f77c3a9b69c652fc3c43789f361e052eaf91bb035e1859bfba5b7dfa5184e0 libattr-debuginfo-2.6.0-1.el9_8.x86_64.rpm SHA-256: e4f77c3a9b69c652fc3c43789f361e052eaf91bb035e1859bfba5b7dfa5184e0 libattr-devel-2.6.0-1.el9_8.i686.rpm SHA-256: 1e17c748094610cf7df4434988f53854b8f2c5bc0bbe6bc30c7d476ddea3f618 libattr-devel-2.6.0-1.el9_8.x86_64.rpm SHA-256: 0ee8d7ae8b2502e1e6baab12886741abc2dde9eef72d6997a8a4eb11583581b5 Red Hat Enterprise Linux for IBM z Systems 9 SRPM attr-2.6.0-1.el9_8.src.rpm SHA-256: 9bdd2e605e0ddc9818382bd95644594fa8b8eedfe08048303093db13cde9963c s390x attr-2.6.0-1.el9_8.s390x.rpm SHA-256: da04e9124b8cf7066b00b59afc58f67042fd5176283eeff2588a880849c177d7 attr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: ae3ee68c1e444e4309553edc3838b608c21ed65218dcf587ca02c3b5db1558e5 attr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: ae3ee68c1e444e4309553edc3838b608c21ed65218dcf587ca02c3b5db1558e5 attr-debugsource-2.6.0-1.el9_8.s390x.rpm SHA-256: 6526fc17b4905788f5f65261ffb852e9e43009e4352a93731d0199d6295260c3 attr-debugsource-2.6.0-1.el9_8.s390x.rpm SHA-256: 6526fc17b4905788f5f65261ffb852e9e43009e4352a93731d0199d6295260c3 libattr-2.6.0-1.el9_8.s390x.rpm SHA-256: a0bb5b85dfc28983f2522c860fcde0792ec03398f1d39ef019d134b840f88165 libattr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: 2cdd72c9ffb8b64897036dc95792598dc32fe6799a08da6e403b05bcc00c5369 libattr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: 2cdd72c9ffb8b64897036dc95792598dc32fe6799a08da6e403b05bcc00c5369 libattr-devel-2.6.0-1.el9_8.s390x.rpm SHA-256: ffc0b6f71827c3975029ecdf9094d68bcbafb88b75b76828f0ede2ae764a5995 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM attr-2.6.0-1.el9_8.src.rpm SHA-256: 9bdd2e605e0ddc9818382bd95644594fa8b8eedfe08048303093db13cde9963c s390x attr-2.6.0-1.el9_8.s390x.rpm SHA-256: da04e9124b8cf7066b00b59afc58f67042fd5176283eeff2588a880849c177d7 attr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: ae3ee68c1e444e4309553edc3838b608c21ed65218dcf587ca02c3b5db1558e5 attr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: ae3ee68c1e444e4309553edc3838b608c21ed65218dcf587ca02c3b5db1558e5 attr-debugsource-2.6.0-1.el9_8.s390x.rpm SHA-256: 6526fc17b4905788f5f65261ffb852e9e43009e4352a93731d0199d6295260c3 attr-debugsource-2.6.0-1.el9_8.s390x.rpm SHA-256: 6526fc17b4905788f5f65261ffb852e9e43009e4352a93731d0199d6295260c3 libattr-2.6.0-1.el9_8.s390x.rpm SHA-256: a0bb5b85dfc28983f2522c860fcde0792ec03398f1d39ef019d134b840f88165 libattr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: 2cdd72c9ffb8b64897036dc95792598dc32fe6799a08da6e403b05bcc00c5369 libattr-debuginfo-2.6.0-1.el9_8.s390x.rpm SHA-256: 2cdd72c9ffb8b64897036dc95792598dc32fe6799a08da6e403b05bcc00c5369 libattr-devel-2.6.0-1.el9_8.s390x.rpm SHA-256: ffc0b6f71827c3975029ecdf9094d68bcbafb88b75b76828f0ede2ae764a5995 Red Hat Enterprise Linux for Power, little endian 9 SRPM attr-2.6.0-1.el9_8.src.rpm SHA-256: 9bdd2e605e0ddc9818382bd95644594fa8b8eedfe08048303093db13cde9963c ppc64le attr-2.6.0-1.el9_8.ppc64le.rpm SHA-256: f3787eac6b2fd8c82c471aaa618036846c5b40d88e68a245337c83dc46c252bc attr-debuginfo-2.6.0-1.el9_8.ppc64le.rpm SHA-256: 665acedd15452aab71b6031178927159887c4fc2d0c259c615c01a151ef2a7d5 attr-debuginfo-2.6.0-1.el9_8.ppc64le.rpm SHA-256: 665acedd15452aab71b6031178927159887c4fc2d0c259c615c01a151ef2a7d5 attr-debugsource-2.6.0-1.el9_8.ppc64le.rpm SHA-256: 382b73596b8406be2a723d9c8b734aa4c90dabc95caf16e282fd68d5a5a97c5a attr-debugsource-2.6.0-1.el9_8.ppc64le.rpm SHA-256: 382b7359