Red Hat Product Errata RHSA-2026:67140 - Security Advisory Issued: 2026-09-14 Updated: 2026-09-14 RHSA-2026:67140 - Security Advisory Overview Updated Packages Synopsis Important: acl security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for acl is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2490277 - CVE-2026-54369 acl: Symlink traversal privilege escalation via libacl functions CVEs CVE-2026-54369 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM acl-2.4.0-0.el9_6.1.src.rpm SHA-256: 6da38751f5ddf64d085db1f4ac7b536a37556425d74b19008a1998540256504d x86_64 acl-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 7922ff8b02bdd4f0771e3036c3d293939bc2d182505772d7fccfb28a650fedc6 acl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: 77388600351cd84eeab0ab95a62157cc6734ef624cc74fd7a5e951a0c9c39e64 acl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: 77388600351cd84eeab0ab95a62157cc6734ef624cc74fd7a5e951a0c9c39e64 acl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: d0258cd51032d3e313a82b3a423cd36ca4a79b2a803974e6d99fa346e289d1af acl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: d0258cd51032d3e313a82b3a423cd36ca4a79b2a803974e6d99fa346e289d1af acl-debugsource-2.4.0-0.el9_6.1.i686.rpm SHA-256: 49e6f5f05d5d261f66aa8c680f7b035acc61a3918c19c2b2250b5c806b93d48e acl-debugsource-2.4.0-0.el9_6.1.i686.rpm SHA-256: 49e6f5f05d5d261f66aa8c680f7b035acc61a3918c19c2b2250b5c806b93d48e acl-debugsource-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 30633f71e76c22799fb9abf344e074e90e50f09228714c132c11b8524b8c6814 acl-debugsource-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 30633f71e76c22799fb9abf344e074e90e50f09228714c132c11b8524b8c6814 libacl-2.4.0-0.el9_6.1.i686.rpm SHA-256: f97aa6de404c1c8c25b630c463a96a40123e0155b692275aa429c600d9cc7278 libacl-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 3fefd0c83d5b54dab6f88bd85fd00493983fc26656c5e1f62f5ea56ce1711388 libacl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: a897e846d202334aebd1ad61a8e3a239e92eb8e6537ccd7c23a3fefca22b360a libacl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: a897e846d202334aebd1ad61a8e3a239e92eb8e6537ccd7c23a3fefca22b360a libacl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 6b2b93144664407dfd13cbce6cc428e7ddab3a74c96aaa1eadc4ca49f230cd58 libacl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 6b2b93144664407dfd13cbce6cc428e7ddab3a74c96aaa1eadc4ca49f230cd58 libacl-devel-2.4.0-0.el9_6.1.i686.rpm SHA-256: 1cd56347f487c9db4be1a6e002e550d1b2ca1cd0ae9d6bf52b12c1b966408296 libacl-devel-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 7196b634179a54b88b9577df4f75a84d370f8cb2a062cda329521266fdd5bd96 Red Hat Enterprise Linux Server - AUS 9.6 SRPM acl-2.4.0-0.el9_6.1.src.rpm SHA-256: 6da38751f5ddf64d085db1f4ac7b536a37556425d74b19008a1998540256504d x86_64 acl-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 7922ff8b02bdd4f0771e3036c3d293939bc2d182505772d7fccfb28a650fedc6 acl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: 77388600351cd84eeab0ab95a62157cc6734ef624cc74fd7a5e951a0c9c39e64 acl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: 77388600351cd84eeab0ab95a62157cc6734ef624cc74fd7a5e951a0c9c39e64 acl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: d0258cd51032d3e313a82b3a423cd36ca4a79b2a803974e6d99fa346e289d1af acl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: d0258cd51032d3e313a82b3a423cd36ca4a79b2a803974e6d99fa346e289d1af acl-debugsource-2.4.0-0.el9_6.1.i686.rpm SHA-256: 49e6f5f05d5d261f66aa8c680f7b035acc61a3918c19c2b2250b5c806b93d48e acl-debugsource-2.4.0-0.el9_6.1.i686.rpm SHA-256: 49e6f5f05d5d261f66aa8c680f7b035acc61a3918c19c2b2250b5c806b93d48e acl-debugsource-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 30633f71e76c22799fb9abf344e074e90e50f09228714c132c11b8524b8c6814 acl-debugsource-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 30633f71e76c22799fb9abf344e074e90e50f09228714c132c11b8524b8c6814 libacl-2.4.0-0.el9_6.1.i686.rpm SHA-256: f97aa6de404c1c8c25b630c463a96a40123e0155b692275aa429c600d9cc7278 libacl-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 3fefd0c83d5b54dab6f88bd85fd00493983fc26656c5e1f62f5ea56ce1711388 libacl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: a897e846d202334aebd1ad61a8e3a239e92eb8e6537ccd7c23a3fefca22b360a libacl-debuginfo-2.4.0-0.el9_6.1.i686.rpm SHA-256: a897e846d202334aebd1ad61a8e3a239e92eb8e6537ccd7c23a3fefca22b360a libacl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 6b2b93144664407dfd13cbce6cc428e7ddab3a74c96aaa1eadc4ca49f230cd58 libacl-debuginfo-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 6b2b93144664407dfd13cbce6cc428e7ddab3a74c96aaa1eadc4ca49f230cd58 libacl-devel-2.4.0-0.el9_6.1.i686.rpm SHA-256: 1cd56347f487c9db4be1a6e002e550d1b2ca1cd0ae9d6bf52b12c1b966408296 libacl-devel-2.4.0-0.el9_6.1.x86_64.rpm SHA-256: 7196b634179a54b88b9577df4f75a84d370f8cb2a062cda329521266fdd5bd96 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM acl-2.4.0-0.el9_6.1.src.rpm SHA-256: 6da38751f5ddf64d085db1f4ac7b536a37556425d74b19008a1998540256504d s390x acl-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 0d4459e3b8b7d40defa1c0866036135c7b1a8ae72bc2d2e769c4cf11be8f315b acl-debuginfo-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 7d113dd8b3bad81c5fa0809a2cbd49f3b11f41b47407d8e47d9fdb31e45b35a4 acl-debuginfo-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 7d113dd8b3bad81c5fa0809a2cbd49f3b11f41b47407d8e47d9fdb31e45b35a4 acl-debugsource-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 4cff937eaeb9286d418506a0b89627ac382a6ed24e82ceae10ad1f592ac24aa9 acl-debugsource-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 4cff937eaeb9286d418506a0b89627ac382a6ed24e82ceae10ad1f592ac24aa9 libacl-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 8192062850c367c982656039fd1b760c5e063177de4545ae7461346bdd5bca0d libacl-debuginfo-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 3509f5e7de79aae01e1a99599740768e23f586d5b43fe8c0800c7e64b0104a8b libacl-debuginfo-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 3509f5e7de79aae01e1a99599740768e23f586d5b43fe8c0800c7e64b0104a8b libacl-devel-2.4.0-0.el9_6.1.s390x.rpm SHA-256: 1a43d483edb3f934491eb038bb2c7bbf6aadf9dd45a0c14e1091896539636790 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM acl-2.4.0-0.el9_6.1.src.rpm SHA-256: 6da38751f5ddf64d085db1f4ac7b536a37556425d74b19008a1998540256504d ppc64le acl-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: 901cd632cef74d3b0be5e1594ee5af07d5c69d6ba8fbc60e389276220611f13b acl-debuginfo-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: acfd43f7ddd163fc7459dd7c0962d2b142ade919e3d4427d5cf7c09ac30851b4 acl-debuginfo-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: acfd43f7ddd163fc7459dd7c0962d2b142ade919e3d4427d5cf7c09ac30851b4 acl-debugsource-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: 0d32fc086b0a4dfcbb6567f3a0dbb4117e6bbd38d5baba58891187944a3231c2 acl-debugsource-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: 0d32fc086b0a4dfcbb6567f3a0dbb4117e6bbd38d5baba58891187944a3231c2 libacl-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: ac3eaa856c1b539980f9108c1ef9fe79a7628e53cd985ca57e4288aa8471dbbc libacl-debuginfo-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: e3a9ee988a93d67042472be55604fb1dce772d8371192421b2cfdea77b63853c libacl-debuginfo-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: e3a9ee988a93d67042472be55604fb1dce772d8371192421b2cfdea77b63853c libacl-devel-2.4.0-0.el9_6.1.ppc64le.rpm SHA-256: 9b8f87797fc83f97797d984222eb6c32e17c8795ccfbe27957ad212ec07b14b6 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM acl-2.4.0-0.el9_6.1.src.rpm SHA-256: 6da38751f5ddf64d085db1f4ac7b536a37556425d74b19008a1998540256504d aarch64 acl-2.4.0-0.el9_6.1.aarch64.rpm SHA-256: 3b88acdb403b28e3d9b72010d6794d2306a3a92295e264f9ca6447883886ac8b acl-debuginfo-2.4.0-0.el9_6.1.aarch64.rpm SHA-256: 5951125447332bb342fcb07e0d884d6a1ecf8a6accbfca44c5edf4677d316b49 acl-debuginfo-2.4.0-0.el9_6.1.aarch64.rpm SHA-256: 5951125447332bb342fcb07e0d884d6a1ecf8a6accbfca44c5edf4677d316b49 acl-debugsource-2.4.0-0.el9_6.1.aarch64.rpm SHA-256: 320396ee5855cec091fb9f37f19834ffd607e7fa8c06700163079809d8a349a1 acl-debugsource-2.4.0-