Opened 19 months ago

Closed 16 months ago

Last modified 16 months ago

#21345 closed enhancement (fixed)

systemd-257.6

Reported by: Bruce Dubbs Owned by: Douglas R. Reno
Priority: high Milestone: 12.4
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description (last modified by Douglas R. Reno)

New minor version.

Bring 257.6 in due to CVE-2025-4598, which allows for local information disclosure (and in some cases privilege escalation) in systemd-coredump. A proof of concept exists that dumps the memory of sshd.

Change History (4)

comment:1 by Douglas R. Reno, 16 months ago

Description: modified (diff)
Milestone: 99-Waiting → 12.4
Owner: changed from blfs-book to Douglas R. Reno
Priority: normal → high
Status: new → assigned
Summary: systemd-257.4 (Wait for next major version and LFS) → systemd-257.6 (wait for LFS)

comment:2 by Bruce Dubbs, 16 months ago

Summary: systemd-257.6 (wait for LFS) → systemd-257.6

comment:3 by Douglas R. Reno, 16 months ago

Resolution: → fixed
Status: assigned → closed

Fixed at a9bb4945137cdf04215b97903e6dfbb3adf4524d

comment:4 by Douglas R. Reno, 16 months ago

SA-12.3-044 issued

Note: See TracTickets for help on using tickets.