[ALSA-2026:42739] Important: acl security update
Type:
security
Severity:
important
Release date:
2026-07-22
Description:
Access Control Lists (ACLs) are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fix(es): * acl: Symlink traversal privilege escalation via libacl functions (CVE-2026-54369) * acl: TOCTOU Symlink Traversal via getfacl/setfacl (CVE-2026-54370) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libacl-2.4.0-1.el10_2.aarch64.rpm 0fdc62b27f40226a86a52bb53ff4665214c634aa2b43da2244203f01026f9ab3
aarch64 acl-2.4.0-1.el10_2.aarch64.rpm 146bcab115f8e05f5e0dab0ce0a6ac5e8236d884b7e920cac8ecbebc0fca7821
aarch64 libacl-devel-2.4.0-1.el10_2.aarch64.rpm 61a99902cb231a69ddd2dc532e6b56432e34db886e1035ad4c69af00e07171b7
ppc64le acl-2.4.0-1.el10_2.ppc64le.rpm b7f17d97288ebc893385514124bcf3e7017fcd838ca2198edf36297567d40df6
ppc64le libacl-devel-2.4.0-1.el10_2.ppc64le.rpm f794ec381a44697c3c0305c0e5976f3a8f17e458e2d8ff2a80ffad5a2f09cd70
ppc64le libacl-2.4.0-1.el10_2.ppc64le.rpm ff08b76867eb0e87a3c56e4e221b6f826b2f4c5f60ed2c134a3080a0139fc92e
s390x libacl-2.4.0-1.el10_2.s390x.rpm 41dba685e2527b9e1492d1d4ebd930c81496061cd06ce81562acbbda14ae400b
s390x libacl-devel-2.4.0-1.el10_2.s390x.rpm d6cc2fe51f6dcda5a5588504f95ae655eeeb214eb4671f891073c38b56a08d76
s390x acl-2.4.0-1.el10_2.s390x.rpm dd83b5e6bc80740695b74443a62371f4787d5c2afa0f46654b3cb310e6012f41
x86_64 libacl-2.4.0-1.el10_2.x86_64.rpm 5e4ef5858753f5567600d07995b20aecc40f97ec4ebd13711db5b5ce7d8a2243
x86_64 acl-2.4.0-1.el10_2.x86_64.rpm 649d8f047ed1304ce2ca5ce0788c2a138f187b0ca32e0c22a567cb9b9157bad8
x86_64 libacl-devel-2.4.0-1.el10_2.x86_64.rpm e07cdf42dac993be9b794447bb4341ebdc892ddf3f5854583083e1849d94d6f6
x86_64_v2 libacl-devel-2.4.0-1.el10_2.x86_64_v2.rpm 41f2f7ee3a99cf1b0bd64f61d898b2f0b7e3708e37a94c325848114444509dd3
x86_64_v2 libacl-2.4.0-1.el10_2.x86_64_v2.rpm 8bf96f1f5a7a092acc072010630f5ceaeee7bf5f8e297901ffb1f50f8a3e3caf
x86_64_v2 acl-2.4.0-1.el10_2.x86_64_v2.rpm dcdb68523edff95c1de2b18f4d15f2e9c08e7327022710d26dabd6db8948e243
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.