Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-ccpp | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-kerneloops | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-pstoreoops | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-python | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-upload-watch | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-vmcore | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-addon-xorg | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-cli | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-console-notification | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-dbus | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-debuginfo | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-desktop | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-devel | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-gui | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-gui-devel | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-gui-libs | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-libs | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-python | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-python-doc | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-retrace-client | 0:2.1.11-62.el7_9 |
| Red Hat · RHEL 7 ELS rhel_els:7 | abrt-tui | 0:2.1.11-62.el7_9 |
Vulnerabilities 1
-
High 7.0
Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process run…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2488568
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69121.json
-
report
https://access.redhat.com/security/cve/CVE-2026-54230
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-54230
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-54230