Red Hat Enterprise Linux (abrt): Mehrere Schwachstellen ermöglichen Manipulation von Dateien

Summary

Product

Vulnerabilities 2

• High 7.0
  CVE-2026-54230

  Abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites

  A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process run…

  Red Hat Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Linux Azure Linux
  Jun 13, 2026
• Medium 5.5
  CVE-2026-54231

  Abrt: unsanitized systemd journal content written to dump directory files enables content injection

  A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without san…

  Red Hat Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 6 Linux Azure Linux
  Jun 13, 2026

Revision history

1. 2026-09-27 #2

   Neue Updates von Oracle Linux aufgenommen

2. 2026-09-20 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:69115 vom 2026-09-20
  https://access.redhat.com/errata/RHSA-2026:69115
• Red Hat Security Advisory RHSA-2026:69116 vom 2026-09-20
  https://access.redhat.com/errata/RHSA-2026:69116
• Red Hat Security Advisory RHSA-2026:69117 vom 2026-09-20
  https://access.redhat.com/errata/RHSA-2026:69117
• Red Hat Security Advisory RHSA-2026:69121 vom 2026-09-20
  https://access.redhat.com/errata/RHSA-2026:69121
• Oracle Linux Security Advisory ELSA-2026-69121 vom 2026-09-25
  https://linux.oracle.com/errata/ELSA-2026-69121.html