The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink, the shell process running as root follows the symlink and writes content to the symlink target, allowing arbitrary file overwrites on the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade abrt-cli-ngUpgrade abrt-addon-vmcoreUpgrade abrt-addon-xorgUpgrade abrt-dbusUpgrade abrt-addon-ccppUpgrade python3-abrt-addonUpgrade abrt-tuiUpgrade abrt-guiUpgrade abrt-plugin-sosreportUpgrade abrt-gui-libsUpgrade abrt-addon-coredump-helperUpgrade abrt-libsUpgrade abrt-plugin-machine-idUpgrade abrt-addon-kerneloopsUpgrade abrt-cliUpgrade abrt-desktopUpgrade python3-abrt-container-addonUpgrade abrt-addon-pstoreoopsUpgrade abrtUpgrade abrt-console-notificationUpgrade python3-abrt-docUpgrade python3-abrt | Oct 11, 2026 | Aug 12, 2026 |
| Oracle_linux | — | Upgrade python3-abrt-addonUpgrade abrt-addon-ccppUpgrade abrt-dbusUpgrade abrt-gui-develUpgrade abrt-cliUpgrade abrtUpgrade abrt-libsUpgrade abrt-pythonUpgrade python3-abrt-container-addonUpgrade abrt-addon-xorgUpgrade abrt-guiUpgrade abrt-addon-kerneloopsUpgrade abrt-desktopUpgrade abrt-addon-pstoreoopsUpgrade abrt-python-docUpgrade abrt-develUpgrade abrt-addon-pythonUpgrade abrt-cli-ngUpgrade abrt-console-notificationUpgrade abrt-addon-coredump-helperUpgrade python3-abrtUpgrade abrt-retrace-clientUpgrade abrt-plugin-sosreportUpgrade abrt-tuiUpgrade abrt-addon-upload-watchUpgrade abrt-addon-vmcoreUpgrade abrt-plugin-machine-idUpgrade abrt-gui-libsUpgrade python3-abrt-doc | Oct 22, 2026 | Jun 13, 2026 |
| Redhat_linux | — | Upgrade abrt-desktopUpgrade abrt-cliUpgrade python3-abrt-debuginfoUpgrade abrt-gui-debuginfoUpgrade abrt-tuiUpgrade abrt-dbus-debuginfoUpgrade python3-abrt-addonUpgrade abrt-gui-develUpgrade abrt-addon-ccpp-debuginfoUpgrade abrt-addon-pstoreoops-debuginfoUpgrade abrtUpgrade abrt-gui-libsUpgrade abrt-python-docUpgrade abrt-plugin-sosreportUpgrade abrt-pythonUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-dbusUpgrade python3-abrt-container-addonUpgrade abrt-addon-ccppUpgrade abrt-addon-xorgUpgrade abrt-gui-libs-debuginfoUpgrade abrt-libsNo solution existsUpgrade abrt-cli-ngUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-addon-upload-watchUpgrade abrt-plugin-machine-idUpgrade abrt-addon-coredump-helperUpgrade python3-abrt-docUpgrade abrt-addon-upload-watch-debuginfoUpgrade abrt-addon-kerneloopsUpgrade abrt-debugsourceUpgrade abrt-retrace-clientUpgrade abrt-tui-debuginfoUpgrade abrt-atomic-debuginfoUpgrade abrt-addon-pythonUpgrade python3-abrtUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-console-notificationUpgrade abrt-retrace-client-debuginfoUpgrade abrt-develUpgrade abrt-addon-vmcoreUpgrade abrt-guiUpgrade abrt-libs-debuginfoUpgrade abrt-debuginfo | Jul 17, 2026 | May 4, 2026 |
| Rocky_linux | — | Upgrade abrt-addon-ccpp-debuginfoUpgrade abrt-debuginfoUpgrade python3-abrt-addonUpgrade abrt-tui-debuginfoUpgrade abrt-cli-ngUpgrade abrt-addon-xorg-debuginfoUpgrade abrt-desktopUpgrade abrt-addon-ccppUpgrade abrt-addon-kerneloopsUpgrade python3-abrt-container-addonUpgrade abrt-libsUpgrade abrt-gui-debuginfoUpgrade abrt-addon-pstoreoopsUpgrade abrt-addon-coredump-helper-debuginfoUpgrade abrt-debugsourceUpgrade abrt-addon-coredump-helperUpgrade abrt-console-notificationUpgrade abrt-guiUpgrade abrt-dbus-debuginfoUpgrade abrt-dbusUpgrade python3-abrtUpgrade abrt-addon-kerneloops-debuginfoUpgrade abrt-plugin-sosreportUpgrade abrt-gui-libsUpgrade abrt-addon-vmcoreUpgrade abrt-libs-debuginfoUpgrade python3-abrt-debuginfoUpgrade abrt-addon-xorgUpgrade abrt-plugin-machine-idUpgrade abrt-gui-libs-debuginfoUpgrade abrtUpgrade abrt-cliUpgrade abrt-tuiUpgrade abrt-addon-pstoreoops-debuginfo | Aug 14, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub