ELSA-2026-42739

ELSA-2026-42739 - acl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-21

Description

[2.4.0-1]
- rebase to 2.4.0 to fix the following CVEs:
- CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186106)
- CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186207)

Related CVEs

CVE-2026-54369

CVE-2026-54370

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	acl-2.4.0-1.el10_2.src.rpm	c94ec92e7135d635862bfc4b8da45d702dc24b364a4e6553ff706244240c2b3e	-	ol10_aarch64_appstream
	acl-2.4.0-1.el10_2.src.rpm	c94ec92e7135d635862bfc4b8da45d702dc24b364a4e6553ff706244240c2b3e	-	ol10_aarch64_baseos_latest
	acl-2.4.0-1.el10_2.src.rpm	c94ec92e7135d635862bfc4b8da45d702dc24b364a4e6553ff706244240c2b3e	-	ol10_aarch64_u2_baseos_patch
	acl-2.4.0-1.el10_2.aarch64.rpm	e5250f6904d14b9844e3a5bcef22a5c0c6ba4a012f7d7d23b2f0884355b0068f	-	ol10_aarch64_baseos_latest
	acl-2.4.0-1.el10_2.aarch64.rpm	e5250f6904d14b9844e3a5bcef22a5c0c6ba4a012f7d7d23b2f0884355b0068f	-	ol10_aarch64_u2_baseos_patch
	libacl-2.4.0-1.el10_2.aarch64.rpm	131225418719777b15343e76c89448a1a4ee36bdfeea42861d45b17387893e46	-	ol10_aarch64_baseos_latest
	libacl-2.4.0-1.el10_2.aarch64.rpm	131225418719777b15343e76c89448a1a4ee36bdfeea42861d45b17387893e46	-	ol10_aarch64_u2_baseos_patch
	libacl-devel-2.4.0-1.el10_2.aarch64.rpm	9483a49579e8be51dd16c26857579ca4f16e2b9ef13a94aa874a40dcbc43ed66	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	acl-2.4.0-1.el10_2.src.rpm	c94ec92e7135d635862bfc4b8da45d702dc24b364a4e6553ff706244240c2b3e	-	ol10_x86_64_appstream
	acl-2.4.0-1.el10_2.src.rpm	c94ec92e7135d635862bfc4b8da45d702dc24b364a4e6553ff706244240c2b3e	-	ol10_x86_64_baseos_latest
	acl-2.4.0-1.el10_2.src.rpm	c94ec92e7135d635862bfc4b8da45d702dc24b364a4e6553ff706244240c2b3e	-	ol10_x86_64_u2_baseos_patch
	acl-2.4.0-1.el10_2.x86_64.rpm	52122779d443c5117cce0aa25553b9ec9dd96665465427371109ed3e3ebb887f	-	ol10_x86_64_baseos_latest
	acl-2.4.0-1.el10_2.x86_64.rpm	52122779d443c5117cce0aa25553b9ec9dd96665465427371109ed3e3ebb887f	-	ol10_x86_64_u2_baseos_patch
	libacl-2.4.0-1.el10_2.x86_64.rpm	611254a0e384e9afc316e6fbbd4d855860375cca3fc73e8e4acaadf3c2e15644	-	ol10_x86_64_baseos_latest
	libacl-2.4.0-1.el10_2.x86_64.rpm	611254a0e384e9afc316e6fbbd4d855860375cca3fc73e8e4acaadf3c2e15644	-	ol10_x86_64_u2_baseos_patch
	libacl-devel-2.4.0-1.el10_2.x86_64.rpm	fef7edc846b86b9d61b34175f58e6dd787c37ce0bb0759ed1caf537da67c787c	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team