VYPR

rpm package

almalinux/libattr-devel

pkg:rpm/almalinux/libattr-devel

Vulnerabilities (1)

  • CVE-2026-54371HigJun 29, 2026
    affected < 2.6.0-1.el8_10fixed 2.6.0-1.el8_10

    attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a path