https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:05:35.538925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:54272 ALSA-2026:54272 — Important: abrt security update 2026-10-03T19:05:35.702803+00:00

Affected: AlmaLinux:8: abrt, AlmaLinux:8: abrt-addon-ccpp, AlmaLinux:8: abrt-addon-coredump-helper, AlmaLinux:8: abrt-addon-kerneloops, AlmaLinux:8: abrt-addon-pstoreoops, AlmaLinux:8: abrt-addon-vmcore, AlmaLinux:8: abrt-addon-xorg, AlmaLinux:8: abrt-cli, AlmaLinux:8: abrt-cli-ng, AlmaLinux:8: abrt-console-notification and 12 more

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228) * abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229) * abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230) * abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-351878 EUVD-2026-351878 2026-10-03T19:05:35.702895+00:00 EUVD-2026-351878 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54228 fkie_cve-2026-54228 2026-10-03T19:05:35.702913+00:00

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.

 https://cve.radiocsirt.org/vuln/ghsa-6pjg-wmm6-r8rp GHSA-6pjg-wmm6-r8rp 2026-10-03T19:05:35.702939+00:00

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package validation and allowing crashes of unpackaged binaries to survive post-create processing.

 https://cve.radiocsirt.org/vuln/rhsa-2026:48819 RHSA-2026:48819 — Red Hat Security Advisory: abrt security update 2026-10-03T19:05:35.702955+00:00

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking

 https://cve.radiocsirt.org/vuln/rhsa-2026:54272 RHSA-2026:54272 — Red Hat Security Advisory: abrt security update 2026-10-03T19:05:35.702976+00:00

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites abrt: unsanitized systemd journal content written to dump directory files enables content injection

 https://cve.radiocsirt.org/vuln/rlsa-2026:54272 RLSA-2026:54272 — Important: abrt security update 2026-10-03T19:05:35.702998+00:00

Affected: Rocky Linux:8: abrt

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228)

* abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229)

* abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230)

* abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2595 WID-SEC-W-2026-2595 — Red Hat Enterprise Linux (abrt): Mehrere Schwachstellen 2026-10-03T19:05:35.703024+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand auszulösen.