|
attr (1:2.5.2-4ubuntu0.1) resolute-security; urgency=medium
* SECURITY UPDATE: Symlink Traversal
- d/p/upstream/CVE-2026-54371-01-add-visibility-attribute-header.patch: Add
visibility attribute header in include/Makemodule.am, include/visibility-
hidden.h.
- d/p/upstream/CVE-2026-54371-02-add-xattrat-syscall-wrappers.patch: Add
xattrat syscall wrappers in configure.ac, include/Makemodule.am,
include/xattrat.h, libmisc/Makemodule.am, libmisc/xattrat.c.
- d/p/upstream/CVE-2026-54371-03-add-xattrat-syscall-backwards-
compatibility-code.patch: Add xattrat syscall backwards compatibility code
in include/Makemodule.am, include/xattrat_compat.h, libmisc/Makemodule.am,
libmisc/getxattrat_compat.c, libmisc/listxattrat_compat.c, libmisc/proc-
self-fd.c, libmisc/proc-self-fd.h, libmisc/removexattrat_compat.c,
libmisc/setxattrat_compat.c.
- d/p/upstream/CVE-2026-54371-04-rename-walk_tree-to-old_walk_tree.patch:
Rename walk_tree to old_walk_tree in include/Makemodule.am,
include/old_walk_tree.h, libmisc/Makemodule.am, libmisc/old_walk_tree.c,
tools/getfattr.c.
- d/p/upstream/CVE-2026-54371-05-add-the-new-walk_tree-helper.patch: Add the
new walk_tree helper in include/Makemodule.am, include/walk_tree.h,
libmisc/Makemodule.am, libmisc/walk_tree.c.
- debian/patches/upstream/CVE-2026-54371-06-harden-getfattr.patch: harden
getfattr in man/man1/getfattr.1, tools/getfattr.c,
test/root/getfattr.test.
- d/p/upstream/CVE-2026-54371-07-setfattr-multiple-restore-accesses-freed-
buffer.patch: setfattr: multiple --restore accesses freed buffer in
tools/setfattr.c.
- d/p/upstream/CVE-2026-54371-08-setfattr-do-not-ignore-no-dereference-
after-restore.patch: setfattr: Do not ignore --no-dereference after
--restore in tools/setfattr.c.
- d/p/upstream/CVE-2026-54371-09-add-openat2-syscall-wrapper.patch: Add
openat2 syscall wrapper in configure.ac, include/Makemodule.am,
include/openat2.h, libmisc/Makemodule.am, libmisc/openat2.c.
- d/p/upstream/CVE-2026-54371-10-harden-setfattr-restore.patch: harden
setfattr --restore in configure.ac, man/man1/setfattr.1,
test/Makemodule.am, tools/setfattr.c, test/restore.test.
- CVE-2026-54371
-- John Breton Sun, 23 Aug 2026 21:34:50 -0400
|
