Red Hat Security AdvisoryRHSA-2025:23032
abrt security update
Released 2025-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) abrt-2.10.9-25.el8_6, abrt-addon-ccpp-2.10.9-25.el8_6, abrt-addon-coredump-helper-2.10.9-25.el8_6 +19
- Red Hat Enterprise Linux AppStream E4S (v.8.6) abrt-2.10.9-25.el8_6, abrt-addon-ccpp-2.10.9-25.el8_6, abrt-addon-coredump-helper-2.10.9-25.el8_6 +19
- Red Hat Enterprise Linux AppStream TUS (v.8.6) abrt-2.10.9-25.el8_6, abrt-addon-ccpp-2.10.9-25.el8_6, abrt-addon-coredump-helper-2.10.9-25.el8_6 +19
Fixes 1 record
Priority MEDIUM 41
A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper v…
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0068 · Published 2025-12-03 · Partial fix · 2.17.7 CWE-78
