[El-errata] ELSA-2026-54272 Important: Oracle Linux 8 abrt security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-54272

http://linux.oracle.com/errata/ELSA-2026-54272.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
abrt-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-addon-ccpp-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-addon-coredump-helper-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-addon-kerneloops-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-addon-pstoreoops-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-addon-vmcore-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-addon-xorg-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-cli-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-cli-ng-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-console-notification-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-dbus-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-desktop-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-gui-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-gui-libs-2.10.9-26.0.2.el8_10.i686.rpm
abrt-gui-libs-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-libs-2.10.9-26.0.2.el8_10.i686.rpm
abrt-libs-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-plugin-machine-id-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-plugin-sosreport-2.10.9-26.0.2.el8_10.x86_64.rpm
abrt-tui-2.10.9-26.0.2.el8_10.x86_64.rpm
python3-abrt-2.10.9-26.0.2.el8_10.x86_64.rpm
python3-abrt-addon-2.10.9-26.0.2.el8_10.x86_64.rpm
python3-abrt-container-addon-2.10.9-26.0.2.el8_10.x86_64.rpm
python3-abrt-doc-2.10.9-26.0.2.el8_10.noarch.rpm

aarch64:
abrt-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-addon-ccpp-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-addon-coredump-helper-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-addon-kerneloops-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-addon-pstoreoops-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-addon-vmcore-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-addon-xorg-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-cli-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-cli-ng-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-console-notification-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-dbus-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-desktop-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-gui-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-gui-libs-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-libs-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-plugin-machine-id-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-plugin-sosreport-2.10.9-26.0.2.el8_10.aarch64.rpm
abrt-tui-2.10.9-26.0.2.el8_10.aarch64.rpm
python3-abrt-2.10.9-26.0.2.el8_10.aarch64.rpm
python3-abrt-addon-2.10.9-26.0.2.el8_10.aarch64.rpm
python3-abrt-container-addon-2.10.9-26.0.2.el8_10.aarch64.rpm
python3-abrt-doc-2.10.9-26.0.2.el8_10.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/abrt-2.10.9-26.0.2.el8_10.src.rpm

Related CVEs:

CVE-2026-54228
CVE-2026-54229
CVE-2026-54230
CVE-2026-54231




Description of changes:

[2.10.9-26.0.2]
- Remove RHT patches
- Drop libreport-rhel and libreport-plugin-rhtsupport requires

[2.10.9-26.0.1]
- Replaces sosreport to sos report in sosreport-event.conf [Orabug: 38590929]
- abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473]
- Disable autoreporting on Oracle Linux [Orabug: 32890748]
- Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
- Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]

[2.10.9-26]
- Fix race condition in ChownProblemDir
- Resolves: CVE-2026-54229
- Fix TOCTOU in SetElement/DeleteElement
- Resolves: CVE-2026-54228
- Fix content injection in journal log collection
- Resolves: CVE-2026-54231
- Fix symlink following in event handler scripts
- Resolves: CVE-2026-54230
- Fix journal entry spoofing in journal dump services
- Related: CVE-2026-54231