Red Hat Product Errata RHSA-2026:48866 - Security Advisory Issued: 2026-07-30 Updated: 2026-07-30 RHSA-2026:48866 - Security Advisory Overview Updated Packages Synopsis Important: abrt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for abrt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality. Security Fix(es): abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228) abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le Fixes BZ - 2488531 - CVE-2026-54228 abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories BZ - 2488532 - CVE-2026-54229 abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking CVEs CVE-2026-54228 CVE-2026-54229 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 SRPM abrt-2.1.11-61.el7_9.src.rpm SHA-256: a417d23c45e88fbdc3e76c09e329aeda7f4a7d751c09a297a81a601f16b412c0 x86_64 abrt-2.1.11-61.el7_9.x86_64.rpm SHA-256: f98f5ed76d16c805c51333c395f793abe2eb283326cdd70e048cb9cb58f77ba2 abrt-addon-ccpp-2.1.11-61.el7_9.x86_64.rpm SHA-256: e99f0429fec892cce33083dadc986b9c00fc4724e5027e5498e35a2bf06d17df abrt-addon-kerneloops-2.1.11-61.el7_9.x86_64.rpm SHA-256: 50deb84119b01db42c0320c8589a31dabbcd0f46e552cc7343eb2a8e0c8534f1 abrt-addon-pstoreoops-2.1.11-61.el7_9.x86_64.rpm SHA-256: 734993f20652866e57c5bf6d01fd84f0df8faf1bab51486198d38be5c3af3382 abrt-addon-python-2.1.11-61.el7_9.x86_64.rpm SHA-256: 0e6b068f111a503dee089d678157e8f8b273b717c7c3195b52b248773fa19c8e abrt-addon-upload-watch-2.1.11-61.el7_9.x86_64.rpm SHA-256: da0c0ac7350f3b7a75b7e5f7b07c4b38b64477d6f1ac9e01779e82566577c74d abrt-addon-vmcore-2.1.11-61.el7_9.x86_64.rpm SHA-256: 34bc464be23bf19a730779ea0cf83f269fde85776fe218484b27d54ff7a2868d abrt-addon-xorg-2.1.11-61.el7_9.x86_64.rpm SHA-256: 098c604a8ebce98ae0d8760732159fee0ae800e303622868c2e54ef70235b8fa abrt-cli-2.1.11-61.el7_9.x86_64.rpm SHA-256: 0088dd5b7728f5ae26d2bc04a9e6ee89e0d85b6dde9591c3e9f32b1f46503817 abrt-console-notification-2.1.11-61.el7_9.x86_64.rpm SHA-256: 042cdf0c3639c2c8d8b4d9837c521bf260b16df80d22f8adc7dc6cb1f458e73a abrt-dbus-2.1.11-61.el7_9.x86_64.rpm SHA-256: 2f1c5e19f867235b71e416e43635545a1fdcbed337f50b5d2f125a1b5b5ec445 abrt-debuginfo-2.1.11-61.el7_9.i686.rpm SHA-256: 3451a67a89e437469d9233327ce9310419ff4a8fc1bada064772a69ea71c2d6b abrt-debuginfo-2.1.11-61.el7_9.i686.rpm SHA-256: 3451a67a89e437469d9233327ce9310419ff4a8fc1bada064772a69ea71c2d6b abrt-debuginfo-2.1.11-61.el7_9.x86_64.rpm SHA-256: a0a438dbab0473b455e3cc58b0d1d03b71a852db6084a2588f6e02f4d2ea14a6 abrt-debuginfo-2.1.11-61.el7_9.x86_64.rpm SHA-256: a0a438dbab0473b455e3cc58b0d1d03b71a852db6084a2588f6e02f4d2ea14a6 abrt-desktop-2.1.11-61.el7_9.x86_64.rpm SHA-256: 90c50390db58f741b8d882ff675cf9ef6bf42324983bd8ca3bb4229f78e27309 abrt-devel-2.1.11-61.el7_9.i686.rpm SHA-256: 083a69eee121977a38406f30937558abb797fcc53a5c4ea771b1f2ca5cc68319 abrt-devel-2.1.11-61.el7_9.x86_64.rpm SHA-256: 6fffe373b90e89aa9327ecc612fbfe62bf07fda0cf179f799bd19793e0379cfd abrt-gui-2.1.11-61.el7_9.x86_64.rpm SHA-256: dfa26b01e8a6a2bb66d514771ff84aee80118d161ef9af802aa82e92349e77c4 abrt-gui-devel-2.1.11-61.el7_9.i686.rpm SHA-256: 285011c40b77300c15b872dfb66d7d9d4194d1dc86a67a03c4ddc64d3829b8b2 abrt-gui-devel-2.1.11-61.el7_9.x86_64.rpm SHA-256: 0a5f02312a13d3d80fbd3314ff17aaa13875492a20d95cbf4d50b951de16d869 abrt-gui-libs-2.1.11-61.el7_9.i686.rpm SHA-256: 87e7c7f31b6ca36dfd43d7c62bdf599bcea09c65c57f5b843cd5e4e858f1e659 abrt-gui-libs-2.1.11-61.el7_9.x86_64.rpm SHA-256: cb4c65c3d21411ad548226d005b0b14ad267b8034c0247e265bd54e3e5c9fcf4 abrt-libs-2.1.11-61.el7_9.i686.rpm SHA-256: 803649ad7c7636ab8c6fa023c15a7e659a8e0a8b643dfa3853a700335a776a12 abrt-libs-2.1.11-61.el7_9.x86_64.rpm SHA-256: 786c37dd7ba545c4910d5d5ae14f5a9bb3ee9d4f5f89c7272cc4404be6b4ac80 abrt-python-2.1.11-61.el7_9.x86_64.rpm SHA-256: fa0c41f5b7888198fced77fccc2d543d61fa4e061449bad2c5b310bfc56cd23d abrt-python-doc-2.1.11-61.el7_9.noarch.rpm SHA-256: a3f87625696ca0e546c9fa2984050ec6a6372877467b3e2ff4db07e304663301 abrt-retrace-client-2.1.11-61.el7_9.x86_64.rpm SHA-256: f0e0fe16da0fb1e05d5dccb424f09cd52110b1dc49bd8b23757425dc99defe12 abrt-tui-2.1.11-61.el7_9.x86_64.rpm SHA-256: fbae6f15a66e4ee9e99dc7eb3bbfd2313850f39032ea739a49e1c5eb7c84b239 Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 SRPM abrt-2.1.11-61.el7_9.src.rpm SHA-256: a417d23c45e88fbdc3e76c09e329aeda7f4a7d751c09a297a81a601f16b412c0 s390x abrt-2.1.11-61.el7_9.s390x.rpm SHA-256: 730096b7af68bda5b03c5d1561f7f29359ce36d0fb565e33f690d97872f16189 abrt-addon-ccpp-2.1.11-61.el7_9.s390x.rpm SHA-256: fd210c4cf002ed0d9985cfa9c516bacb9637d37adcd7ef0fc8476aeb7b6a1852 abrt-addon-kerneloops-2.1.11-61.el7_9.s390x.rpm SHA-256: 0955cbe02af440ffd4b45da9cc1d85a2956d3d9596d5bbbc367984f5cec697ce abrt-addon-pstoreoops-2.1.11-61.el7_9.s390x.rpm SHA-256: 41bfa2f8ca533ffbdbe4ca8f27c7c91c464363a41bc5489b07f6fa9e2bd905ef abrt-addon-python-2.1.11-61.el7_9.s390x.rpm SHA-256: c215b48bed7e31ebb89f89efb8de95a194f50e39974dd051d84822a33b761d05 abrt-addon-upload-watch-2.1.11-61.el7_9.s390x.rpm SHA-256: 0a719d13ddb4e549c8cad8f45b44982d30c10efca2cb562723902bbc4dc17360 abrt-addon-vmcore-2.1.11-61.el7_9.s390x.rpm SHA-256: f55be301caa5a1b54a91119494100010e76c1a1f1a58e0354610ae29b8cb6237 abrt-addon-xorg-2.1.11-61.el7_9.s390x.rpm SHA-256: eb91eebaa63c9d48a547c48860fc45cd98a58f8e0e031a1849c214c538cda55b abrt-cli-2.1.11-61.el7_9.s390x.rpm SHA-256: e9fc20e20a0ad23016e05ad2f69305d58437c1deb282b95bc5da161e03dac2a4 abrt-console-notification-2.1.11-61.el7_9.s390x.rpm SHA-256: e0ddda159d2a3791bcbf9fc6d87681b7ecbd325e336ce1c07d2b0f232b0879a3 abrt-dbus-2.1.11-61.el7_9.s390x.rpm SHA-256: 46aac9fb6559fdb9d8e6edf24447202387c7ce1a432342d7ccff642f1912f47b abrt-debuginfo-2.1.11-61.el7_9.s390.rpm SHA-256: 92985c5e1cf35467937beea5ef3a0ec6590efd620cb88ae3e38849f64804a12d abrt-debuginfo-2.1.11-61.el7_9.s390.rpm SHA-256: 92985c5e1cf35467937beea5ef3a0ec6590efd620cb88ae3e38849f64804a12d abrt-debuginfo-2.1.11-61.el7_9.s390x.rpm SHA-256: 6b0dc655358d264afacb49ac6ff0abe14f9978973ac43d0fe0050d0e57b9da0f abrt-debuginfo-2.1.11-61.el7_9.s390x.rpm SHA-256: 6b0dc655358d264afacb49ac6ff0abe14f9978973ac43d0fe0050d0e57b9da0f abrt-desktop-2.1.11-61.el7_9.s390x.rpm SHA-256: 180a1b3f311f77c15f7bd567f061c297f271e528a085efbe700c5c5945eaeb0b abrt-devel-2.1.11-61.el7_9.s390.rpm SHA-256: 95b7ac245c429c144a088d9130ccda145162578cb3029571de1de4460999bd11 abrt-devel-2.1.11-61.el7_9.s390x.rpm SHA-256: 2c9859ac496d2ed3d094ec25e92a4fb754af6fc9cec7c24b32417510d9323af3 abrt-gui-2.1.11-61.el7_9.s390x.rpm SHA-256: 9eca953129ee7530f3bda4ab3f4c3203e1f3b87c87a236dd76f8bc0eaaa0528f abrt-gui-devel-2.1.11-61.el7_9.s390.rpm SHA-256: d40e395e7937a644251bc5c7d4691077539dfae19cc2f33d9bea7fb1a95fa751 abrt-gui-devel-2.1.11-61.el7_9.s390x.rpm SHA-256: 8511d9344b514aaf3d9203b82b8f6cccbfaab7518441df6263ef8918c50d74f9 abrt-gui-libs-2.1.11-61.el7_9.s390.rpm SHA-256: efb040fa4e4e1f6f4596616e8c7c090a99f265ee82b124b06b77ba65799dfd0e abrt-gui-libs-2.1.11-61.el7_9.s390x.rpm SHA-256: ab61bca4d674474162b16537e560d81599a166add48aec428a2c98ee9a4d0b91 abrt-libs-2.1.11-61.el7_9.s390.rpm SHA-256: abb369d6e7451dc6d7288c0d51865f52dc8fdd8e81b35566aea291b2c0c03559 abrt-libs-2.1.11-61.el7_9.s390x.rpm SHA-256: 5d11c2e9b2504aada456662dd0f556e252a27676bb8fcf62ea3dbfebc720b3ec abrt-python-2.1.11-61.el7_9.s390x.rpm SHA-256: 80f429da8400637efb7fa054e8506b6db86580faab4bccb0572332bf3569b36b abrt-python-doc-2.1.11-61.el7_9.noarch.rpm SHA-256: a3f87625696ca0e546c9fa2984050ec6a6372877467b3e2ff4db07e304663301 abrt-retrace-client-2.1.11-61.el7_9.s390x.rpm SHA-256: e43034dee941381e1d38595cbdbc574d91cb4fe1c5a1432cd9355b5a374f43c8 abrt-tui-2.1.11-61.el7_9.s390x.rpm SHA-256: b9b9556fb27b05e7b6a5001c134e2836e81d4b4f5046d31658fe1b922827f2e0 Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 SRPM abrt-2.1.11-61.el7_9.src.rpm SHA-256: a417d23c45e88fbdc3e76c09e329aeda7f4a7d751c09a297a81a601f16b412c0 ppc64 abrt-2.1.11-61.el7_9.ppc64.rpm SHA-256: b45f3e01467d816af42c953d10102f9b608f579e7761f9e713815a848cc1d71e abrt-addon-ccpp-2.1.11-61.el7_9.ppc64.rpm SHA-256: 669a9ed5afdf5f70e72e6be2918868b0a8a1059a2a7593a2ad5c9736fd003fa1 abrt-addon-kerneloops-2.1.11-61.el7_9.ppc64.rpm SHA-256: 53a0c017cdd14ae1f1e69bc2a54620319ca4223119d5b6ff11e0cca053ce2fdc abrt-addon-pstoreoops