Summary
The Automatic Bug Reporting Tool (ABRT) recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABRT uses a plug-in system to extend its functionality.
Security Fix(es):
* abrt: Command-injection in ABRT leading to local privilege escalation (CVE-2025-12744)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | abrt | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-addon-ccpp | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-addon-coredump-helper | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-addon-kerneloops | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-addon-pstoreoops | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-addon-vmcore | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-addon-xorg | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-cli | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-cli-ng | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-console-notification | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-dbus | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-desktop | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-gui | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-gui-libs | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-libs | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-plugin-machine-id | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-plugin-sosreport | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | abrt-tui | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | python3-abrt | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | python3-abrt-addon | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | python3-abrt-container-addon | 2.10.9-25.el8_10.alma.1 |
| AlmaLinux · 8 | python3-abrt-doc | 2.10.9-25.el8_10.alma.1 |
Vulnerabilities 1
-
High 8.8CVE-2025-12744 Public exploit
Abrt: command-injection in abrt leading to local privilege escalation
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user c…