The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade abrt-desktopUpgrade abrt-plugin-machine-idUpgrade abrtUpgrade abrt-console-notificationUpgrade python3-abrt-docUpgrade abrt-gui-libsUpgrade abrt-cliUpgrade python3-abrtUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-kerneloopsUpgrade python3-abrt-container-addonUpgrade abrt-addon-coredump-helperUpgrade abrt-libsUpgrade abrt-dbusUpgrade python3-abrt-addonUpgrade abrt-addon-xorgUpgrade abrt-tuiUpgrade abrt-addon-vmcoreUpgrade abrt-cli-ngUpgrade abrt-guiUpgrade abrt-plugin-sosreportUpgrade abrt-addon-ccpp | Oct 11, 2026 | Aug 12, 2026 |
| Oracle_linux | — | Upgrade abrt-addon-ccppUpgrade abrt-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-gui-develUpgrade abrt-desktopUpgrade abrt-guiUpgrade abrt-dbusUpgrade abrt-pythonUpgrade abrt-addon-xorgUpgrade python3-abrt-container-addonUpgrade abrt-addon-kerneloopsUpgrade abrtUpgrade abrt-develUpgrade python3-abrt-addonUpgrade abrt-python-docUpgrade abrt-cli-ngUpgrade abrt-libsUpgrade abrt-addon-pythonUpgrade abrt-gui-libsUpgrade abrt-plugin-sosreportUpgrade abrt-addon-upload-watchUpgrade abrt-addon-vmcoreUpgrade python3-abrtUpgrade abrt-addon-coredump-helperUpgrade abrt-tuiUpgrade python3-abrt-docUpgrade abrt-retrace-clientUpgrade abrt-plugin-machine-idUpgrade abrt-console-notification | Oct 22, 2026 | Jun 13, 2026 |
| Redhat_linux | — | Upgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-addon-xorgUpgrade abrt-gui-libsUpgrade abrtUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-cliUpgrade abrt-python-docUpgrade abrt-desktopUpgrade abrt-gui-debuginfoUpgrade abrt-libsUpgrade python3-abrt-container-addonUpgrade abrt-cli-ngUpgrade abrt-gui-develNo solution existsUpgrade abrt-gui-libs-debuginfoUpgrade abrt-plugin-sosreportUpgrade python3-abrt-debuginfoUpgrade abrt-addon-pstoreoopsUpgrade python3-abrt-addonUpgrade abrt-dbus-debuginfoUpgrade abrt-tuiUpgrade abrt-dbusUpgrade abrt-addon-ccppUpgrade abrt-pythonUpgrade abrt-plugin-machine-idUpgrade abrt-tui-debuginfoUpgrade abrt-addon-upload-watch-debuginfoUpgrade abrt-retrace-clientUpgrade python3-abrt-docUpgrade abrt-addon-upload-watchUpgrade abrt-debuginfoUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-console-notificationUpgrade abrt-debugsourceUpgrade python3-abrtUpgrade abrt-guiUpgrade abrt-addon-pythonUpgrade abrt-atomic-debuginfoUpgrade abrt-retrace-client-debuginfoUpgrade abrt-develUpgrade abrt-addon-vmcoreUpgrade abrt-addon-kerneloopsUpgrade abrt-libs-debuginfoUpgrade abrt-addon-coredump-helper | Jul 17, 2026 | May 4, 2026 |
| Rocky_linux | — | Upgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-tui-debuginfoUpgrade python3-abrt-addonUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-cli-ngUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-desktopUpgrade abrt-gui-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-ccppUpgrade abrt-libsUpgrade python3-abrt-container-addonUpgrade abrt-debuginfoUpgrade abrt-console-notificationUpgrade abrt-plugin-sosreportUpgrade abrt-libs-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrt-gui-libsUpgrade abrt-addon-xorgUpgrade abrt-addon-coredump-helperUpgrade abrt-gui-libs-debuginfoUpgrade abrt-debugsourceUpgrade abrt-addon-kerneloops-debuginfoUpgrade python3-abrtUpgrade abrt-cliUpgrade abrtUpgrade abrt-guiUpgrade abrt-dbusUpgrade abrt-tuiUpgrade abrt-plugin-machine-idUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-dbus-debuginfoUpgrade abrt-addon-vmcore | Aug 14, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub