Red Hat Security Advisory: abrt security update

Fixed packages 76

Vulnerabilities 2

• High 7.0
  CVE-2026-54230

  Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

  A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process run…

  Red Hat Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Linux Azure Linux
  Jun 13, 2026
• Medium 5.5
  CVE-2026-54231

  Abrt: unsanitized systemd journal content written to dump directory files enables content injection

  A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without san…

  Red Hat Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Linux Azure Linux
  Jun 13, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2488568
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2488571
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69115.json
• report
  https://access.redhat.com/security/cve/CVE-2026-54230
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-54230
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-54230
• report
  https://access.redhat.com/security/cve/CVE-2026-54231
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-54231
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-54231