The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump directory without sanitizing embedded control characters. A local user can inject arbitrary content into the journal output by embedding newline characters in syslog messages, controlling the content that root writes to dump directory files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade abrt-addon-xorgUpgrade abrt-addon-kerneloopsUpgrade python3-abrt-addonUpgrade abrt-addon-ccppUpgrade abrt-gui-libsUpgrade abrtUpgrade abrt-tuiUpgrade abrt-libsUpgrade abrt-desktopUpgrade abrt-cliUpgrade abrt-cli-ngUpgrade abrt-addon-pstoreoopsUpgrade abrt-dbusUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-container-addonUpgrade abrt-addon-vmcoreUpgrade abrt-guiUpgrade abrt-console-notificationUpgrade abrt-plugin-sosreportUpgrade python3-abrtUpgrade abrt-plugin-machine-idUpgrade python3-abrt-doc | Oct 11, 2026 | Aug 12, 2026 |
| Oracle_linux | — | Upgrade python3-abrt-addonUpgrade abrt-addon-pstoreoopsUpgrade abrt-desktopUpgrade abrt-addon-xorgUpgrade abrt-libsUpgrade abrt-dbusUpgrade abrt-tuiUpgrade abrt-cli-ngUpgrade abrt-gui-libsUpgrade python3-abrt-container-addonUpgrade abrt-cliUpgrade abrt-addon-ccppUpgrade abrtUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-docUpgrade abrt-plugin-machine-idUpgrade abrt-plugin-sosreportUpgrade abrt-console-notificationUpgrade abrt-guiUpgrade abrt-addon-vmcoreUpgrade abrt-addon-kerneloopsUpgrade python3-abrt | Oct 22, 2026 | Jun 13, 2026 |
| Redhat_linux | — | Upgrade abrt-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrt-addon-coredump-helper-debuginfoUpgrade python3-abrt-docUpgrade abrt-libs-debuginfoUpgrade python3-abrt-container-addonUpgrade abrt-plugin-machine-idUpgrade abrt-desktopUpgrade python3-abrtUpgrade abrt-console-notificationUpgrade abrt-tui-debuginfoUpgrade abrt-atomic-debuginfoUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-ccppUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-retrace-client-debuginfoUpgrade abrt-libsUpgrade abrt-addon-upload-watch-debuginfoUpgrade abrt-debugsourceUpgrade abrt-addon-coredump-helperUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-addon-xorgUpgrade abrt-guiUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-gui-libsUpgrade abrt-gui-libs-debuginfoUpgrade abrt-dbus-debuginfoUpgrade abrt-cli-ngUpgrade abrt-addon-vmcoreUpgrade abrt-tuiNo solution existsUpgrade abrtUpgrade abrt-gui-debuginfoUpgrade abrt-plugin-sosreportUpgrade python3-abrt-addonUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-cliUpgrade abrt-dbus | Jul 17, 2026 | May 4, 2026 |
| Rocky_linux | — | Upgrade abrt-guiUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrt-debugsourceUpgrade abrt-tuiUpgrade abrt-dbus-debuginfoUpgrade abrt-addon-vmcoreUpgrade abrt-plugin-machine-idUpgrade python3-abrtUpgrade abrt-addon-coredump-helperUpgrade abrt-console-notificationUpgrade abrt-cliUpgrade abrt-plugin-sosreportUpgrade abrt-gui-libs-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrt-dbusUpgrade abrt-debuginfoUpgrade abrt-libsUpgrade abrt-desktopUpgrade abrt-addon-kerneloopsUpgrade abrt-addon-xorgUpgrade abrt-libs-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-addon-ccpp-debuginfoUpgrade python3-abrt-container-addonUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-cli-ngUpgrade abrt-addon-ccppUpgrade abrtUpgrade abrt-tui-debuginfoUpgrade abrt-gui-libsUpgrade python3-abrt-addon | Aug 14, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub