Red Hat Security Advisory

RHSA-2025:23033

abrt security update

Released 2025-12-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) abrt-2.10.9-25.el8_4, abrt-addon-ccpp-2.10.9-25.el8_4, abrt-addon-coredump-helper-2.10.9-25.el8_4 +19
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) abrt-2.10.9-25.el8_4, abrt-addon-ccpp-2.10.9-25.el8_4, abrt-addon-coredump-helper-2.10.9-25.el8_4 +19

Fixes 1 record

TI-2025-11680 CVE-2025-12744 · GHSA-vwhf-x6j3-3qfg

Abrt: command-injection in abrt leading to local privilege escalation

MEDIUM 41

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper v…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0068 Published 2025-12-03 Partial fix · 2.17.7 CWE-78