From fb86abde3bc96a04de006b456a59009817cca515 Mon Sep 17 00:00:00 2001 From: Michal Srb Date: Thu, 4 Dec 2025 20:32:21 +0100 Subject: [PATCH 1/2] a-a-save-container-data: validate input Resolves: CVE-2025-12744 Signed-off-by: Michal Srb --- .gitignore | 1 + abrt.spec | 6 +++++- sources | 2 +- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index cc954d8..643f820 100644 --- a/.gitignore +++ b/.gitignore @@ -86,3 +86,4 @@ abrt-1.1.13.tar.gz /abrt-2.17.5.tar.gz /abrt-2.17.6.tar.gz /abrt-2.17.7.tar.gz +/abrt-2.17.8.tar.gz diff --git a/abrt.spec b/abrt.spec index d6cfac9..94695b0 100644 --- a/abrt.spec +++ b/abrt.spec @@ -56,7 +56,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt -Version: 2.17.7 +Version: 2.17.8 Release: 1%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ @@ -994,6 +994,10 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Thu Dec 04 2025 Michal Srb - 2.17.8-1 +- a-a-save-container-data: validate input +- Resolves: CVE-2025-12744 + * Thu Oct 02 2025 Michal Srb - 2.17.7-1 - Update to upstream release 2.17.7 - Fix reading gpg keys with RPM 6.0.0 (rhbz#2396899) diff --git a/sources b/sources index 080308e..4e58c99 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (abrt-2.17.7.tar.gz) = 0e9c05a897387e20b930b616c58b187dd27f6e3372a9067b77f849d70e59443688022c5ae9fcad5968d8e637c4db7f6b500ddbb5aa59e61872b14867c5c7124a +SHA512 (abrt-2.17.8.tar.gz) = 90b74229412e0186bfa109ee940a60c9f3c0f7ce8c1216acad6f05619a1bb591e7f0bae87363143a05034312c9f14fe5ace341b84f680780ceb93a1e624705b3 From 0baf939494e4c94b47b2d746756ce280ff8b85db Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Fri, 16 Jan 2026 03:23:57 +0000 Subject: [PATCH 2/2] Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild --- abrt.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/abrt.spec b/abrt.spec index 94695b0..3bdd3fe 100644 --- a/abrt.spec +++ b/abrt.spec @@ -57,7 +57,7 @@ Summary: Automatic bug detection and reporting tool Name: abrt Version: 2.17.8 -Release: 1%{?dist} +Release: 2%{?dist} License: GPL-2.0-or-later URL: https://abrt.readthedocs.org/ Source: https://github.com/abrt/%{name}/archive/%{version}/%{name}-%{version}.tar.gz @@ -994,6 +994,9 @@ killall abrt-dbus >/dev/null 2>&1 || : %config(noreplace) %{_sysconfdir}/profile.d/abrt-console-notification.sh %changelog +* Fri Jan 16 2026 Fedora Release Engineering - 2.17.8-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild + * Thu Dec 04 2025 Michal Srb - 2.17.8-1 - a-a-save-container-data: validate input - Resolves: CVE-2025-12744