Back Linuxsecurity

Fedora 42: abrt Critical Command Injection Vulnerability CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 6, 2025

abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality. Update Information : Fix CVE-2025-12744

abrt is a tool to help users to detect defects in applications and

to create a bug report with all information needed by maintainer to fix it.

It uses plugin system to extend its functionality.

* Thu Dec 4 2025 Michal Srb - 2.17.8-1 - a-a-save-container-data: validate input - Resolves: CVE-2025-12744

[ 1 ] Bug #2418568 - CVE-2025-12744 abrt: Command-injection in ABRT leading to local privilege escalation [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-64091db7e0' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 and 43 Address Critical abrt Command Injection Vulnerability CVE-2025-12744 Fedora has released updates for versions 42 and 43 to address a critical command injection vulnerability in the abrt tool, identified as CVE-2025-12744. This vulnerability affects users relying on abrt for defect detection and bug reporting in applications. The updates were made available on December 4, 2025. 3 sources 48

Extracted Entities

CVEs (1)

CVE-2025-12744