Red Hat Security AdvisoryRHSA-2026:54272
abrt security update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) abrt-2.10.9-26.el8_10, abrt-addon-ccpp-2.10.9-26.el8_10, abrt-addon-coredump-helper-2.10.9-26.el8_10 +19
Fixes 4 records
Priority LOW 35
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00228 · Published 2026-06-13 · Partial fix · 2.1.11-62.el7_9, 2.10.9-26.el8_10 +3 CWE-59
Priority LOW 35
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00134 · Published 2026-06-13 · Partial fix · 2.1.11-61.el7_9, 2.10.9-26.el8_10 +3 CWE-367
Priority LOW 32
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00124 · Published 2026-06-13 · Partial fix · 2.1.11-61.el7_9, 2.10.9-26.el8_10 +3 CWE-362
Priority LOW 24
A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00185 · Published 2026-06-13 · Partial fix · 2.10.9-26.el8_10, 2.10.9-25.el8_4.2 +2 CWE-74
