[ubuntu/jammy-security] attr 1:2.5.1-1ubuntu0.1 (Accepted)

[John Breton]

attr (1:2.5.1-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Symlink Traversal
    - d/p/CVE-2026-54371-01-add-visibility-attribute-header.patch: Add
      visibility attribute header in include/Makemodule.am, include/visibility-
      hidden.h.
    - d/p/CVE-2026-54371-02-add-xattrat-syscall-wrappers.patch: Add xattrat
      syscall wrappers in configure.ac, include/Makemodule.am,
      include/xattrat.h, libmisc/Makemodule.am, libmisc/xattrat.c.
    - d/p/CVE-2026-54371-03-add-xattrat-syscall-backwards-compatibility-
      code.patch: Add xattrat syscall backwards compatibility code in
      include/Makemodule.am, include/xattrat_compat.h, libmisc/Makemodule.am,
      libmisc/getxattrat_compat.c, libmisc/listxattrat_compat.c, libmisc/proc-
      self-fd.c, libmisc/proc-self-fd.h, libmisc/removexattrat_compat.c,
      libmisc/setxattrat_compat.c.
    - d/p/CVE-2026-54371-04-rename-walk_tree-to-old_walk_tree.patch: Rename
      walk_tree to old_walk_tree in include/Makemodule.am,
      include/old_walk_tree.h, libmisc/Makemodule.am, libmisc/old_walk_tree.c,
      tools/getfattr.c.
    - d/p/CVE-2026-54371-05-add-the-new-walk_tree-helper.patch: Add the new
      walk_tree helper in include/Makemodule.am, include/walk_tree.h,
      libmisc/Makemodule.am, libmisc/walk_tree.c.
    - debian/patches/CVE-2026-54371-06-harden-getfattr.patch: harden getfattr in
      man/man1/getfattr.1, tools/getfattr.c, test/root/getfattr.test.
    - d/p/CVE-2026-54371-07-setfattr-multiple-restore-accesses-freed-
      buffer.patch: setfattr: multiple --restore accesses freed buffer in
      tools/setfattr.c.
    - d/p/CVE-2026-54371-08-setfattr-do-not-ignore-no-dereference-after-
      restore.patch: setfattr: Do not ignore --no-dereference after --restore in
      tools/setfattr.c.
    - d/p/CVE-2026-54371-09-add-openat2-syscall-wrapper.patch: Add openat2
      syscall wrapper in configure.ac, include/Makemodule.am, include/openat2.h,
      libmisc/Makemodule.am, libmisc/openat2.c.
    - debian/patches/CVE-2026-54371-10-harden-setfattr-restore.patch: harden
      setfattr --restore in configure.ac, man/man1/setfattr.1,
      test/Makemodule.am, tools/setfattr.c, test/restore.test.
    - CVE-2026-54371

Date: 2026-08-24 01:53:29.792855+00:00
Changed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/attr/1:2.5.1-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.