{"id":"ALSA-2026:54272","summary":"Important: abrt security update","details":"The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.   \n\nSecurity Fix(es):  \n\n  * abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228)\n  * abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229)\n  * abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230)\n  * abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","modified":"2026-08-12T15:00:04.293715902Z","published":"2026-08-12T00:00:00Z","related":["CVE-2026-54228","CVE-2026-54229","CVE-2026-54230","CVE-2026-54231"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:54272"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-54228"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-54229"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-54230"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-54231"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2488531"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2488532"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2488568"},{"type":"REPORT","url":"https://bugzilla.redhat.com/2488571"},{"type":"ADVISORY","url":"https://errata.almalinux.org/8/ALSA-2026-54272.html"}],"affected":[{"package":{"name":"abrt","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-addon-ccpp","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-addon-ccpp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-addon-coredump-helper","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-addon-coredump-helper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-addon-kerneloops","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-addon-kerneloops"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-addon-pstoreoops","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-addon-pstoreoops"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-addon-vmcore","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-addon-vmcore"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-addon-xorg","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-addon-xorg"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-cli","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-cli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-cli-ng","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-cli-ng"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-console-notification","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-console-notification"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-dbus","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-dbus"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-desktop","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-desktop"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-gui","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-gui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-gui-libs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-gui-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-libs","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-libs"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-plugin-machine-id","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-plugin-machine-id"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-plugin-sosreport","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-plugin-sosreport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"abrt-tui","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/abrt-tui"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"python3-abrt","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/python3-abrt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"python3-abrt-addon","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/python3-abrt-addon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"python3-abrt-container-addon","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/python3-abrt-container-addon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}},{"package":{"name":"python3-abrt-doc","ecosystem":"AlmaLinux:8","purl":"pkg:rpm/almalinux/python3-abrt-doc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.9-26.el8_10.alma.1"}]}],"database_specific":{"source":"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2026:54272.json"}}],"schema_version":"1.9.0"}