Most recent entries from all

ALSA-2026:54272 — Important: abrt security update

Affected: AlmaLinux:8: abrt, AlmaLinux:8: abrt-addon-ccpp, AlmaLinux:8: abrt-addon-coredump-helper, AlmaLinux:8: abrt-addon-kerneloops, AlmaLinux:8: abrt-addon-pstoreoops, AlmaLinux:8: abrt-addon-vmcore, AlmaLinux:8: abrt-addon-xorg, AlmaLinux:8: abrt-cli, AlmaLinux:8: abrt-cli-ng, AlmaLinux:8: abrt-console-notification and 12 more

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228) * abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229) * abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230) * abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

EUVD-2026-351887

fkie_cve-2026-54229

A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows an attacker to gain filesystem-level control of the dump directory while privileged event scripts are still running.

GHSA-c3cq-8jxp-w66j

RHSA-2026:48819 — Red Hat Security Advisory: abrt security update

RHSA-2026:54272 — Red Hat Security Advisory: abrt security update

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites abrt: unsanitized systemd journal content written to dump directory files enables content injection

RLSA-2026:54272 — Important: abrt security update

Affected: Rocky Linux:8: abrt

The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.

Security Fix(es):

* abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228)

* abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229)

* abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230)

* abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

WID-SEC-W-2026-2595 — Red Hat Enterprise Linux (abrt): Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand auszulösen.