Red Hat Product Errata RHSA-2026:54272 - Security Advisory Issued: 2026-08-12 Updated: 2026-08-12 RHSA-2026:54272 - Security Advisory Overview Updated Packages Synopsis Important: abrt security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for abrt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality. Security Fix(es): abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories (CVE-2026-54228) abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking (CVE-2026-54229) abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites (CVE-2026-54230) abrt: unsanitized systemd journal content written to dump directory files enables content injection (CVE-2026-54231) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2488531 - CVE-2026-54228 abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories BZ - 2488532 - CVE-2026-54229 abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking BZ - 2488568 - CVE-2026-54230 abrt: event handler scripts follow symlinks when writing output files, allowing arbitrary file overwrites BZ - 2488571 - CVE-2026-54231 abrt: unsanitized systemd journal content written to dump directory files enables content injection CVEs CVE-2026-54228 CVE-2026-54229 CVE-2026-54230 CVE-2026-54231 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM abrt-2.10.9-26.el8_10.src.rpm SHA-256: 00f31eaaadd8973bde058a72a2b466e66694668b5976c2e1f205569fb1d104b6 x86_64 abrt-2.10.9-26.el8_10.x86_64.rpm SHA-256: a58a9f98cac52b9cbee448bef256e9619c1f6f6edbc3f49f2f1d1ba2895e4419 abrt-addon-ccpp-2.10.9-26.el8_10.x86_64.rpm SHA-256: 493476a49afada8cdc52231b1e5efa27543f1378132df452ce76fcb6be4786b9 abrt-addon-ccpp-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 2e61f6018e22a6c4a131d3ef74ebc33c577d3bea2746eea508a24ae9be2118d4 abrt-addon-ccpp-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 5c1652d70f46b9eab7cab83f73595907da532e0c7d105b8f434650e026677382 abrt-addon-coredump-helper-2.10.9-26.el8_10.x86_64.rpm SHA-256: e3c2ab7a75a7a660dda2106788c89a882a934d8ebded88ac3daaf5866f2cc2af abrt-addon-coredump-helper-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 71090f6922936a4052d6ce4c4c03f6390076f70624a0d85077921359bed2b286 abrt-addon-coredump-helper-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 5ef990bf7cd03cd97d390b5c5d08dceb34533cca8b52a9ec161fbd7aaf241c8a abrt-addon-kerneloops-2.10.9-26.el8_10.x86_64.rpm SHA-256: 743d45071b9507f699bf8f111af2115213ee8e25e652d3f25efba89fd8def412 abrt-addon-kerneloops-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 0a510b12113d8822cee56cbd129b6b0b9795934a5f33d1e44d6cfee455dce9ad abrt-addon-kerneloops-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 10c0323a5afe29ef7d8cbba4f29f89d87c4761f1c392501df54687b089c612bc abrt-addon-pstoreoops-2.10.9-26.el8_10.x86_64.rpm SHA-256: 81d687a2065a704bf4bd121a325beea6553b469f42efcccfff193107f3187592 abrt-addon-pstoreoops-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: d892d6a555e61b4133fe11c7ac506991866a8240a3e6c768d21a9248aa0383a7 abrt-addon-pstoreoops-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 95d3d29ccb3e875bfcb5913dbd528d420a52c4504be49bf8b1ac98569238594c abrt-addon-upload-watch-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 162c9aad059a109dba86e0e16680f29ea3c4eaaf16331dce0d6e6425abbefc76 abrt-addon-upload-watch-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 4e4f0bab7a15028c4ff9f81fdcaa9c5e7ba32a5b1e4e1a945dc52db6e2cfe413 abrt-addon-vmcore-2.10.9-26.el8_10.x86_64.rpm SHA-256: 0d3614287a8301fc7c783bf02c7332da75923dfa9a675d9caf0959ccc2734b70 abrt-addon-xorg-2.10.9-26.el8_10.x86_64.rpm SHA-256: 0b5aad07fdfedf78ed0ce78db3583225b25ea3d69c9ca99909e745c8af9119ca abrt-addon-xorg-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: ffaebaffc0ddb7f48ac93c984deba506c4ef0b5ba9f57e1ebbd973453a7098c4 abrt-addon-xorg-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 7946963e67329a6c244964e42ccf233f59f1bcce2f23e4cd0fefae462b64c6cd abrt-atomic-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 222b762a6802990c52541865540fbbd9472a756d8839bcec5cde7a9bc4f39841 abrt-atomic-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: e2d943e5d7f4d33abed6bb3096084965ecadd8fb497e351c3d3e1a17daf20513 abrt-cli-2.10.9-26.el8_10.x86_64.rpm SHA-256: 1cdf561f12934b8ba48f8e30322107e22ce510b4b0156068a00c08478a09c079 abrt-cli-ng-2.10.9-26.el8_10.x86_64.rpm SHA-256: 5c6ad966f354ac6a7089a9ee9483e50f57a5e851535f29314a83c65b074617f1 abrt-console-notification-2.10.9-26.el8_10.x86_64.rpm SHA-256: bbf8612e9ef468af56b20648c230035b68d189899cbf0969bb5f23d31102ee1c abrt-dbus-2.10.9-26.el8_10.x86_64.rpm SHA-256: 3983d3ce54622d624e30ab37bec6e03666df03dc05a0e8350b97ce8ab85f2390 abrt-dbus-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 370d8ec81053187bc8309c24f4fd740da6afee018bd36db8625a31104abf2507 abrt-dbus-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: e9323fd79e06c49f6c28fa425e72c7a8b34c4e148c285c2fecdca680db34f05d abrt-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 2fb807eae920948dc8b29eff80d523afb6108b5ab2a69bdac809c1aa98b7b806 abrt-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 3831dae60193306ecd0ca159088eb216639a6cfdf53dd45a0e031313d6f64c6f abrt-debugsource-2.10.9-26.el8_10.i686.rpm SHA-256: ab05c25d14e717d3989f2002677a633324a24cea44c41ccffd88c045656b565a abrt-debugsource-2.10.9-26.el8_10.x86_64.rpm SHA-256: 42e9656b39841274ee1c45c881a3d990252f78ec1ac76f73a59767098a917337 abrt-desktop-2.10.9-26.el8_10.x86_64.rpm SHA-256: e25cc3bc34547063312cf230a34a126a1a624a5c27cc1c6efaa04295c6b731f8 abrt-gui-2.10.9-26.el8_10.x86_64.rpm SHA-256: f61df6769262ee0c9fff5d6c916036186a7ffe3710ada56fc90eca35ec482163 abrt-gui-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 657c10f7eb9b1c5342b4749e83f8e39d9cfe2f4669662ac8f5044acefa48bf1d abrt-gui-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: ecfb9d320c3f2f3152620fcd172b0b4723719130ab6159db06b81f98bea109e8 abrt-gui-libs-2.10.9-26.el8_10.i686.rpm SHA-256: fdf09447403be49533b4005eed25c92a08b5547199281d4867dc9f1908b0ffaa abrt-gui-libs-2.10.9-26.el8_10.x86_64.rpm SHA-256: 4150ecd4036d9762d4ab3e3d23cd3588a1285215717b12ce5aaa1a3c1a6fc71a abrt-gui-libs-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 010abf3c99ed3b0c72aad0b5bbbf7f67cebef4f814e9b8e972b06e4c3419b832 abrt-gui-libs-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: edfbeecebaf630836479c203be169a00a02926a15f20b29cc691a05eb1052f30 abrt-libs-2.10.9-26.el8_10.i686.rpm SHA-256: 5f02249eacd811b5b0ef0317fefec264f6fdff47010e74768ee9039f52ad666b abrt-libs-2.10.9-26.el8_10.x86_64.rpm SHA-256: 7e712e8a631f0ed77c1059c2e7360b217405e39f6ab02725a07a831ef4d8a9e4 abrt-libs-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 851f28a46f2257d9b01d0763a4a829b1fe720fad792c3183861431da7eef2f78 abrt-libs-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 87179fae582d86a420f2fb5c6de6ca0379e9d772494422dbfd6bba4250ef5806 abrt-plugin-machine-id-2.10.9-26.el8_10.x86_64.rpm SHA-256: dbe66fcf962b474bbf97dbd403de069359704413102970648c776a1c4e733296 abrt-plugin-sosreport-2.10.9-26.el8_10.x86_64.rpm SHA-256: 57b5c17645f3b2ce2ffa28ad715ee3e00fdafb476a42d29f5a6e5184cf728315 abrt-retrace-client-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 0ab70dab375c7ff5c2061aa6dbe7b785699fed6fc7d8c6b85ce4e74a2c9f3ce4 abrt-retrace-client-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 6af97b380c1d8b6eea725eba7c51985f02f4a77243d2eb5db066882cc8f9559b abrt-tui-2.10.9-26.el8_10.x86_64.rpm SHA-256: db9c206043f08483f125aca6f219926987d8b0558fe8bc6482a5aa3af5a016b6 abrt-tui-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: d7b180c56fb96e9a10a2aac4978dc7e671da6c07f65e8956b8c5ddd182f3592f abrt-tui-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: 87dc1d98bfa8149ea06c1615c2a80f765d085fb2f5eb3ccac62e48912d6b1195 python3-abrt-2.10.9-26.el8_10.x86_64.rpm SHA-256: 34daeaecd61a698a95f77cbe5d301e6ab576361b81f9bee86500f270384e48d6 python3-abrt-addon-2.10.9-26.el8_10.x86_64.rpm SHA-256: b0f6d324a60ca4ea5faeb00e25f1d65b03998dee9e8a051f77e253951ed29da9 python3-abrt-container-addon-2.10.9-26.el8_10.x86_64.rpm SHA-256: ff6f4ffca0c19af4ce4960d8bcc63c044a71c1639c294b5c45126d7b2962ff04 python3-abrt-debuginfo-2.10.9-26.el8_10.i686.rpm SHA-256: 307bb965ab204c865e1d490f9831111909245f43584a09d972f0a4992b8edfb4 python3-abrt-debuginfo-2.10.9-26.el8_10.x86_64.rpm SHA-256: d19de67c068fde8dbdf28098e45febcf224e59327b6e17eac53c5ecb62774a13 python3-abrt-doc-2.10.9-26.el8_10.noarch.rpm SHA-256: 70e367573c