Most recent entries from all

ALSA-2026:54272 — Important: abrt security update

2026-10-03T16:58:50.655278+00:00

Affected: AlmaLinux:8: abrt, AlmaLinux:8: abrt-addon-ccpp, AlmaLinux:8: abrt-addon-coredump-helper, AlmaLinux:8: abrt-addon-kerneloops, AlmaLinux:8: abrt-addon-pstoreoops, AlmaLinux:8: abrt-addon-vmcore, AlmaLinux:8: abrt-addon-xorg, AlmaLinux:8: abrt-cli, AlmaLinux:8: abrt-cli-ng, AlmaLinux:8: abrt-console-notification and 12 more

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228) * abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229) * abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230) * abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-372733

2026-10-03T16:58:50.655364+00:00

EUVD-2026-372733

fkie_cve-2026-54230

2026-10-03T16:58:50.655381+00:00

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.

GHSA-gvjc-4rfj-mxxj

2026-10-03T16:58:50.655405+00:00

RHSA-2026:54272 — Red Hat Security Advisory: abrt security update

2026-10-03T16:58:50.655421+00:00

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites abrt: unsanitized systemd journal content written to dump directory files enables content injection

RHSA-2026:69115 — Red Hat Security Advisory: abrt security update

2026-10-03T16:58:50.655446+00:00

abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites abrt: unsanitized systemd journal content written to dump directory files enables content injection

RLSA-2026:54272 — Important: abrt security update

2026-10-03T16:58:50.655464+00:00

Affected: Rocky Linux:8: abrt

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228)

* abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229)

* abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230)

* abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

WID-SEC-W-2026-3470 — Red Hat Enterprise Linux (abrt): Mehrere Schwachstellen ermöglichen Manipulation von Dateien

2026-10-03T16:58:50.655490+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.