Red Hat Product Errata RHSA-2026:67142 - Security Advisory Issued: 2026-09-14 Updated: 2026-09-14 RHSA-2026:67142 - Security Advisory Overview Updated Packages Synopsis Important: acl security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for acl is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2490277 - CVE-2026-54369 acl: Symlink traversal privilege escalation via libacl functions CVEs CVE-2026-54369 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM acl-2.4.0-0.el9_2.1.src.rpm SHA-256: cdfc8982d10c913de737be362fa59123db001ddea9e71bcc6ecc18ac8f593f0a x86_64 acl-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: beb7dc1290ab18421d5dff371787cb25c73a4091a06c60ee912e6ec8c8768fa6 acl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: 4577736869d3cf1a78f9385636d96e2836cdf0548d7628aaea3b4db345dcb098 acl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: 4577736869d3cf1a78f9385636d96e2836cdf0548d7628aaea3b4db345dcb098 acl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b23bad8a68ee742b106e7e77d76eb82c92bfc1758c14a4e6c63ae7267859e501 acl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b23bad8a68ee742b106e7e77d76eb82c92bfc1758c14a4e6c63ae7267859e501 acl-debugsource-2.4.0-0.el9_2.1.i686.rpm SHA-256: 7da8e16d126f113c0e8e38b3fb38467e6f05f7e9100ee78675fc7afea6095f3a acl-debugsource-2.4.0-0.el9_2.1.i686.rpm SHA-256: 7da8e16d126f113c0e8e38b3fb38467e6f05f7e9100ee78675fc7afea6095f3a acl-debugsource-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b628f84471a9317ad0bb487b24ba053e1e3ba1b4dd867288c88ec136b7692db9 acl-debugsource-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b628f84471a9317ad0bb487b24ba053e1e3ba1b4dd867288c88ec136b7692db9 libacl-2.4.0-0.el9_2.1.i686.rpm SHA-256: 096f261ea903eb94d2474b6f13ecd0a40e7c0d2e497ead12703569eab17b3c49 libacl-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: 0a3f9ae66168e55b79b3f0f5be1f6962ecde954c9623a765d6b9291b854f825d libacl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: b54fc0ca3ee463beec1d5a91b2859fbc5079e8f8ae34eedb59be2a734f769f06 libacl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: b54fc0ca3ee463beec1d5a91b2859fbc5079e8f8ae34eedb59be2a734f769f06 libacl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: ce67e67ee437af0fb75ea6ee08ca4cf9c4d8462e4b8494efcb35718eebeca2da libacl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: ce67e67ee437af0fb75ea6ee08ca4cf9c4d8462e4b8494efcb35718eebeca2da libacl-devel-2.4.0-0.el9_2.1.i686.rpm SHA-256: 4243afc5a7ac0ee95714b19001aae289ad04128dd21dac90d2e0f0fdcf7cef35 libacl-devel-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: d4f0c83e7502bc0814aa6eeb1b1c527140b258d426841fde1993cc4abaf9a03a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM acl-2.4.0-0.el9_2.1.src.rpm SHA-256: cdfc8982d10c913de737be362fa59123db001ddea9e71bcc6ecc18ac8f593f0a ppc64le acl-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: 8c11bf0551bc815b23154697e42ae24e9e08588186f0f58bf9c7b54480b5f1c5 acl-debuginfo-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: 2ae313f1823d7ac9461f3b336ee66bdf0e894af7ce1edec8d550c706ac25d51f acl-debuginfo-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: 2ae313f1823d7ac9461f3b336ee66bdf0e894af7ce1edec8d550c706ac25d51f acl-debugsource-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: 7c26a0a3037d6a29cb6584dda95277f0dd303225add0ad7bf220df2add4a522f acl-debugsource-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: 7c26a0a3037d6a29cb6584dda95277f0dd303225add0ad7bf220df2add4a522f libacl-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: e261494e58fe512490044feed9f70c5bade94174479ce6d1c68bdc5fbe89e32c libacl-debuginfo-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: f7e51af10000a7234c2857631847ebbef5e777b6066e1e3e7c8c5a8fd2b5acd8 libacl-debuginfo-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: f7e51af10000a7234c2857631847ebbef5e777b6066e1e3e7c8c5a8fd2b5acd8 libacl-devel-2.4.0-0.el9_2.1.ppc64le.rpm SHA-256: a2da7cd413aaf60969de3866b7b6d7f5743fcf5cd7e6eca0eb499ef97630bd6e Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM acl-2.4.0-0.el9_2.1.src.rpm SHA-256: cdfc8982d10c913de737be362fa59123db001ddea9e71bcc6ecc18ac8f593f0a x86_64 acl-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: beb7dc1290ab18421d5dff371787cb25c73a4091a06c60ee912e6ec8c8768fa6 acl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: 4577736869d3cf1a78f9385636d96e2836cdf0548d7628aaea3b4db345dcb098 acl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: 4577736869d3cf1a78f9385636d96e2836cdf0548d7628aaea3b4db345dcb098 acl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b23bad8a68ee742b106e7e77d76eb82c92bfc1758c14a4e6c63ae7267859e501 acl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b23bad8a68ee742b106e7e77d76eb82c92bfc1758c14a4e6c63ae7267859e501 acl-debugsource-2.4.0-0.el9_2.1.i686.rpm SHA-256: 7da8e16d126f113c0e8e38b3fb38467e6f05f7e9100ee78675fc7afea6095f3a acl-debugsource-2.4.0-0.el9_2.1.i686.rpm SHA-256: 7da8e16d126f113c0e8e38b3fb38467e6f05f7e9100ee78675fc7afea6095f3a acl-debugsource-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b628f84471a9317ad0bb487b24ba053e1e3ba1b4dd867288c88ec136b7692db9 acl-debugsource-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: b628f84471a9317ad0bb487b24ba053e1e3ba1b4dd867288c88ec136b7692db9 libacl-2.4.0-0.el9_2.1.i686.rpm SHA-256: 096f261ea903eb94d2474b6f13ecd0a40e7c0d2e497ead12703569eab17b3c49 libacl-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: 0a3f9ae66168e55b79b3f0f5be1f6962ecde954c9623a765d6b9291b854f825d libacl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: b54fc0ca3ee463beec1d5a91b2859fbc5079e8f8ae34eedb59be2a734f769f06 libacl-debuginfo-2.4.0-0.el9_2.1.i686.rpm SHA-256: b54fc0ca3ee463beec1d5a91b2859fbc5079e8f8ae34eedb59be2a734f769f06 libacl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: ce67e67ee437af0fb75ea6ee08ca4cf9c4d8462e4b8494efcb35718eebeca2da libacl-debuginfo-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: ce67e67ee437af0fb75ea6ee08ca4cf9c4d8462e4b8494efcb35718eebeca2da libacl-devel-2.4.0-0.el9_2.1.i686.rpm SHA-256: 4243afc5a7ac0ee95714b19001aae289ad04128dd21dac90d2e0f0fdcf7cef35 libacl-devel-2.4.0-0.el9_2.1.x86_64.rpm SHA-256: d4f0c83e7502bc0814aa6eeb1b1c527140b258d426841fde1993cc4abaf9a03a Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM acl-2.4.0-0.el9_2.1.src.rpm SHA-256: cdfc8982d10c913de737be362fa59123db001ddea9e71bcc6ecc18ac8f593f0a aarch64 acl-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 7cdfd2c9b4b57fc9c8db4b7f4515993e822b79308bd179384f3bd3e2bf625d6c acl-debuginfo-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 72d7c852d444f7fb29813a3494a4703bdf5e6f5c3ded4b3bd7f3e1e5316b1c95 acl-debuginfo-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 72d7c852d444f7fb29813a3494a4703bdf5e6f5c3ded4b3bd7f3e1e5316b1c95 acl-debugsource-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 80de219ec79d3531b7950bc83b7f284846acb1d4a5b37ed8db19bff56ee5e48a acl-debugsource-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 80de219ec79d3531b7950bc83b7f284846acb1d4a5b37ed8db19bff56ee5e48a libacl-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: e2b102d69e4d73cf5a6cd28eff86d39c54183b2dace3ec55d89c53d1be4a27e2 libacl-debuginfo-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 6af9f9cbd561a793c39d6b61d9eee2c4c7af505da01baa93611eb84bf66c4188 libacl-debuginfo-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: 6af9f9cbd561a793c39d6b61d9eee2c4c7af505da01baa93611eb84bf66c4188 libacl-devel-2.4.0-0.el9_2.1.aarch64.rpm SHA-256: a211aca6768a5dd95d9b08b5f7600c24f8027e8a3c96633d9af2bf95b4b1354e Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM acl-2.4.0-0.el9_2.1.src.rpm SHA-256: cdfc8982d10c913de737be362fa59123db001ddea9e71bcc6ecc18ac8f593f0a s390x acl-2.4.0-0.el9_2.1.s390x.rpm SHA-256: 5fa7b159be89d669b19eb6a8ccb87676f2a2e8638f801a1858e66733ac405bc4 acl-debuginfo-2.4.0-0.el9_2.1.s390x.rpm SHA-256: 99a09326b595b2906b5b4d09e3832cf75724e880e7a556f59ed7e90e9aa2c121 acl-debuginfo-2.4.0-0.el9_2.1.s390x.rpm SHA-256: 99a09326b595b2906b5b4d09e3832cf75724e880e7a556f59ed7e90e9aa2c121 acl-debugsource-2.4.0-0.el9_2.1.s390x.rpm SHA-256: f0566ef7d95925689d8d99632a241ccd83cf880fb751fec687893b342c0cd5e9 acl-debugsource-2.4.0-0.el9_2.1.s390x.rpm SHA-256: f0566ef7d95925689d8d99632a241ccd83cf880fb751fec687893b342c0cd5e9 libacl-2.4.0-0.el9_2.1.s390x.rpm SHA-256: 27b3416e58d0fc7718856a4796ea9982999016f531aeead6df435b91908b72ea libacl-debuginfo-2.4.0-0.el9_2.1.s390x.rpm SHA-256: 2f259db14d97bf9cbd639cd97d8a5d1b48cf