Summary
[2.1.11-60.0.7]
- Fix symlink following in event handler scripts [CVE-2026-54230][Orabug: 40051150]
[2.1.11-60.0.5]
- Fix TOCTOU in SetElement/DeleteElement (CVE-2026-54228) [Orabug: 39811882]
- Fix race condition in ChownProblemDir (CVE-2026-54229) [Orabug: 39811882]
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | abrt | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-ccpp | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-kerneloops | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-pstoreoops | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-python | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-upload-watch | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-vmcore | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-addon-xorg | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-cli | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-console-notification | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-dbus | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-desktop | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-devel | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-gui | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-gui-devel | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-gui-libs | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-libs | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-python | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-python-doc | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-retrace-client | 0:2.1.11-60.0.7.el7 |
| Oracle Linux · 7 | abrt-tui | 0:2.1.11-60.0.7.el7 |
Vulnerabilities 1
-
High 7.0
Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process run…