Red Hat Product Errata RHSA-2026:67144 - Security Advisory Issued: 2026-09-14 Updated: 2026-09-14 RHSA-2026:67144 - Security Advisory Overview Updated Packages Synopsis Important: acl security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for acl is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2490277 - CVE-2026-54369 acl: Symlink traversal privilege escalation via libacl functions CVEs CVE-2026-54369 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM acl-2.4.0-0.el9_4.1.src.rpm SHA-256: dfab71b8f7a610daf02fd4874532b2a245cd037a4636717e7c9ac9eede2c8f24 x86_64 acl-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 2246965fdf817488b378c27d138ba8d22f380b8e65c6aeac8e26a15fb60dfbf1 acl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 64e88d9bc3afaca71ecad7dbc2c4e5aa00b68e4baa027cba805eb42b6d9e7624 acl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 64e88d9bc3afaca71ecad7dbc2c4e5aa00b68e4baa027cba805eb42b6d9e7624 acl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: a773644af1ea34e7966ad202c7246fc89d7f3a3adcf82199496f06d020ca4f23 acl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: a773644af1ea34e7966ad202c7246fc89d7f3a3adcf82199496f06d020ca4f23 acl-debugsource-2.4.0-0.el9_4.1.i686.rpm SHA-256: 34618a77c1158848c1e0b2f3758a9b23a5c00b3440e0cbcbf6b97e15833e9636 acl-debugsource-2.4.0-0.el9_4.1.i686.rpm SHA-256: 34618a77c1158848c1e0b2f3758a9b23a5c00b3440e0cbcbf6b97e15833e9636 acl-debugsource-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 295603c4794b212d594e04333f24931b4d35e3032ab061ae4227253115ce4cdd acl-debugsource-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 295603c4794b212d594e04333f24931b4d35e3032ab061ae4227253115ce4cdd libacl-2.4.0-0.el9_4.1.i686.rpm SHA-256: be836384e56b6df10cf340bbe705add5fcd955beadce27920b05b1e96a923546 libacl-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 3eca77d1f96ea175d5feafd3a95fdcc096b0322725ff28862c82e326292de701 libacl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 10d5958bf3b51da17213b7a5b324087f0ce3f620f3555068cc5fc5d200a7a8a2 libacl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 10d5958bf3b51da17213b7a5b324087f0ce3f620f3555068cc5fc5d200a7a8a2 libacl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 1e754b68bd82dfbac29a874e0402e8a26b6f82661df316d399a30b02991b1dc7 libacl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 1e754b68bd82dfbac29a874e0402e8a26b6f82661df316d399a30b02991b1dc7 libacl-devel-2.4.0-0.el9_4.1.i686.rpm SHA-256: 6463492701370ae636b832bdb7197a037539fd3dcac3f4a6eb55ab351ebd7f01 libacl-devel-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: b8210dca8524cdd10c82f1d3af336e74a076015ab1afbbb8e74ba6c5bb575711 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM acl-2.4.0-0.el9_4.1.src.rpm SHA-256: dfab71b8f7a610daf02fd4874532b2a245cd037a4636717e7c9ac9eede2c8f24 ppc64le acl-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 2179ec62bd52002d1e80ab5122b061443be7bde32b4d3c258bdc99fd12c9de49 acl-debuginfo-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 70166fadc0be90ce2ba1fb47061ae3a93f5cccd8e8af6259d287b1870fc7e0e8 acl-debuginfo-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 70166fadc0be90ce2ba1fb47061ae3a93f5cccd8e8af6259d287b1870fc7e0e8 acl-debugsource-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 59c1d58fb06f87f9cf68785ffc53462a6746744a302a165bc1f5c3bfccd4f6d8 acl-debugsource-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 59c1d58fb06f87f9cf68785ffc53462a6746744a302a165bc1f5c3bfccd4f6d8 libacl-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: c4701aa477eceb87ac6e60cec82603022a5284ab0c8f5cd156c645e737183ac8 libacl-debuginfo-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 36ede9bc0bce2a7de4a190f00dbcb6ba20b1d418259b44a10ea3cb6ab36c7ff5 libacl-debuginfo-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 36ede9bc0bce2a7de4a190f00dbcb6ba20b1d418259b44a10ea3cb6ab36c7ff5 libacl-devel-2.4.0-0.el9_4.1.ppc64le.rpm SHA-256: 24e223efacffa0aebe11ccd6cfd6b82ca159b9f4d026e5ed0c4384fdc310b489 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM acl-2.4.0-0.el9_4.1.src.rpm SHA-256: dfab71b8f7a610daf02fd4874532b2a245cd037a4636717e7c9ac9eede2c8f24 x86_64 acl-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 2246965fdf817488b378c27d138ba8d22f380b8e65c6aeac8e26a15fb60dfbf1 acl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 64e88d9bc3afaca71ecad7dbc2c4e5aa00b68e4baa027cba805eb42b6d9e7624 acl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 64e88d9bc3afaca71ecad7dbc2c4e5aa00b68e4baa027cba805eb42b6d9e7624 acl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: a773644af1ea34e7966ad202c7246fc89d7f3a3adcf82199496f06d020ca4f23 acl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: a773644af1ea34e7966ad202c7246fc89d7f3a3adcf82199496f06d020ca4f23 acl-debugsource-2.4.0-0.el9_4.1.i686.rpm SHA-256: 34618a77c1158848c1e0b2f3758a9b23a5c00b3440e0cbcbf6b97e15833e9636 acl-debugsource-2.4.0-0.el9_4.1.i686.rpm SHA-256: 34618a77c1158848c1e0b2f3758a9b23a5c00b3440e0cbcbf6b97e15833e9636 acl-debugsource-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 295603c4794b212d594e04333f24931b4d35e3032ab061ae4227253115ce4cdd acl-debugsource-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 295603c4794b212d594e04333f24931b4d35e3032ab061ae4227253115ce4cdd libacl-2.4.0-0.el9_4.1.i686.rpm SHA-256: be836384e56b6df10cf340bbe705add5fcd955beadce27920b05b1e96a923546 libacl-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 3eca77d1f96ea175d5feafd3a95fdcc096b0322725ff28862c82e326292de701 libacl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 10d5958bf3b51da17213b7a5b324087f0ce3f620f3555068cc5fc5d200a7a8a2 libacl-debuginfo-2.4.0-0.el9_4.1.i686.rpm SHA-256: 10d5958bf3b51da17213b7a5b324087f0ce3f620f3555068cc5fc5d200a7a8a2 libacl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 1e754b68bd82dfbac29a874e0402e8a26b6f82661df316d399a30b02991b1dc7 libacl-debuginfo-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: 1e754b68bd82dfbac29a874e0402e8a26b6f82661df316d399a30b02991b1dc7 libacl-devel-2.4.0-0.el9_4.1.i686.rpm SHA-256: 6463492701370ae636b832bdb7197a037539fd3dcac3f4a6eb55ab351ebd7f01 libacl-devel-2.4.0-0.el9_4.1.x86_64.rpm SHA-256: b8210dca8524cdd10c82f1d3af336e74a076015ab1afbbb8e74ba6c5bb575711 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM acl-2.4.0-0.el9_4.1.src.rpm SHA-256: dfab71b8f7a610daf02fd4874532b2a245cd037a4636717e7c9ac9eede2c8f24 aarch64 acl-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: 4f521640388ee39d43f06cb05551def15a5fed20774479d2e4931a1a5b405580 acl-debuginfo-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: f09d51e297767a7a3bc6b72dd727e869af61d7b591b09567abd9f88dd9a59807 acl-debuginfo-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: f09d51e297767a7a3bc6b72dd727e869af61d7b591b09567abd9f88dd9a59807 acl-debugsource-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: cd25679d7c83b13a3187512e494055c6944862834142b1bef799e6f0823fb1fd acl-debugsource-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: cd25679d7c83b13a3187512e494055c6944862834142b1bef799e6f0823fb1fd libacl-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: c760b83e5a9bce09a192c5bb5fbbc38f96c1c4bb244513d7f9729dd1f416a883 libacl-debuginfo-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: dc4900c7d1473708ab7c1a40a4499e24edd218d06d0d41852bbc958d26d0d0a3 libacl-debuginfo-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: dc4900c7d1473708ab7c1a40a4499e24edd218d06d0d41852bbc958d26d0d0a3 libacl-devel-2.4.0-0.el9_4.1.aarch64.rpm SHA-256: 3bc4cff5f54da5cf68d38caa81d7e77947b8d4de94772cd1c9124fb79966aaeb Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM acl-2.4.0-0.el9_4.1.src.rpm SHA-256: dfab71b8f7a610daf02fd4874532b2a245cd037a4636717e7c9ac9eede2c8f24 s390x acl-2.4.0-0.el9_4.1.s390x.rpm SHA-256: 592d6d1e244346dd63df8ac2b4f77c733f823767f0d9d63e7298def62b319117 acl-debuginfo-2.4.0-0.el9_4.1.s390x.rpm SHA-256: f5f89acf9516c1308040307716d81113ef9c7e55fc80ad2add9f09272b74ed88 acl-debuginfo-2.4.0-0.el9_4.1.s390x.rpm SHA-256: f5f89acf9516c1308040307716d81113ef9c7e55fc80ad2add9f09272b74ed88 acl-debugsource-2.4.0-0.el9_4.1.s390x.rpm SHA-256: 29c5077ffbdb41d71e7338efd737f5d5489e955ae90923c92d639912349563fe acl-debugsource-2.4.0-0.el9_4.1.s390x.rpm SHA-256: 29c5077ffbdb41d71e7338efd737f5d5489e955ae90923c92d639912349563fe libacl-2.4.0-0.el9_4.1.s390x.rpm SHA-256: 9a806fcbfb3ed65c0d0aaa505d4840718a3b1886b8558d6398e9798b3c8d35e5 libacl-debuginfo-2.4.0-0.el9_4.1.s390x.rpm SHA-256: eea454d8fea1959b1dc91f37ef11953053c5