Summary
[2.10.9-25.0.1]
- Replaces sosreport to sos report in sosreport-event.conf [Orabug: 38590929]
- abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm [Orabug: 34184473]
- Disable autoreporting on Oracle Linux [Orabug: 32890748]
- Add orabug32082455-Upstream_reference_in_python3-abrt-addon.patch [Orabug: 32082455]
- Add bug29870394-fix-redhat-reference.patch [Orabug: 29870394]
- Drop libreport-rhel and libreport-plugin-rhtsupport requires
[2.10.9-25.openela.0.1]
- Remove RHT patches
[2.10.9-25]
- a-a-save-container-data: validate input
- Resolves: CVE-2025-12744
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | abrt | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-addon-ccpp | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-addon-coredump-helper | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-addon-kerneloops | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-addon-pstoreoops | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-addon-vmcore | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-addon-xorg | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-cli | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-cli-ng | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-console-notification | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-dbus | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-desktop | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-gui | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-gui-libs | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-libs | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-plugin-machine-id | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-plugin-sosreport | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | abrt-tui | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | python3-abrt | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | python3-abrt-addon | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | python3-abrt-container-addon | 0:2.10.9-25.0.1.el8_10 |
| Oracle Linux · 8 | python3-abrt-doc | 0:2.10.9-25.0.1.el8_10 |
Vulnerabilities 1
-
High 8.8CVE-2025-12744 Public exploit
Abrt: command-injection in abrt leading to local privilege escalation
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user c…