Skip to content

attr: update to 2.6.0. - #61642

Merged
Duncaen merged 1 commit into
void-linux:masterfrom
vodkanull:attr-2.6.0
Jul 26, 2026
Merged

attr: update to 2.6.0.#61642
Duncaen merged 1 commit into
void-linux:masterfrom
vodkanull:attr-2.6.0

Conversation

@vodkanull

Copy link
Copy Markdown
Contributor

Update to 2.6.0, which includes fixes for CVE-2026-54371 (symlink
traversal privilege escalation via getfattr/setfattr).

  • Remove musl build patch (included upstream)
  • Update license to LGPL-2.1-or-later AND GPL-2.0-or-later
    (tools are GPL, library is LGPL)

Built and tested successfully on x86_64 (glibc):
SONAME libattr.so.1 unchanged

@vodkanull
vodkanull force-pushed the attr-2.6.0 branch 2 times, most recently from 41787bc to b315a13 Compare July 26, 2026 04:18
@Duncaen
Duncaen force-pushed the attr-2.6.0 branch 3 times, most recently from 42adbc0 to 5ec9132 Compare July 26, 2026 14:37
Co-authored-by: Duncaen <duncaen@voidlinux.org>
@Duncaen
Duncaen merged commit ffea806 into void-linux:master Jul 26, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants