Summary
[2.10.9-26.0.2]
- Remove RHT patches
- Drop libreport-rhel and libreport-plugin-rhtsupport requires
[2.10.9-26.0.1]
- Replaces sosreport to sos report in sosreport-event.conf [Orabug: 38590929]
- abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473]
- Disable autoreporting on Oracle Linux [Orabug: 32890748]
- Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
- Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
[2.10.9-26]
- Fix race condition in ChownProblemDir
- Resolves: CVE-2026-54229
- Fix TOCTOU in SetElement/DeleteElement
- Resolves: CVE-2026-54228
- Fix content injection in journal log collection
- Resolves: CVE-2026-54231
- Fix symlink following in event handler scripts
- Resolves: CVE-2026-54230
- Fix journal entry spoofing in journal dump services
- Related: CVE-2026-54231
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | abrt | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-addon-ccpp | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-addon-coredump-helper | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-addon-kerneloops | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-addon-pstoreoops | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-addon-vmcore | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-addon-xorg | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-cli | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-cli-ng | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-console-notification | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-dbus | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-desktop | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-gui | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-gui-libs | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-libs | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-plugin-machine-id | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-plugin-sosreport | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | abrt-tui | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | python3-abrt | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | python3-abrt-addon | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | python3-abrt-container-addon | 0:2.10.9-26.0.2.el8_10 |
| Oracle Linux · 8 | python3-abrt-doc | 0:2.10.9-26.0.2.el8_10 |
Vulnerabilities 4
-
High 7.8
Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories
A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-o…
-
High 7.0
Abrt: chownproblemdir succeeds during active post-create event processing due to inadequate locking
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DD_OPEN_READONLY and calls dd_chown to change ownership of all files to the caller's uid, succeeding even while post-create event…
-
High 7.0
Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process run…
-
Medium 5.5
Abrt: unsanitized systemd journal content written to dump directory files enables content injection
A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without san…