Opened 7 months ago

Closed 4 months ago

Last modified 4 months ago

#5674 closed enhancement (fixed)

systemd-257.6

Reported by: Bruce Dubbs Owned by: lfs-book
Priority: highest Milestone: 12.4
Component: Book Version: git
Severity: normal Keywords:
Cc:

Description

New minor version.

Change History (8)

comment:1 by Bruce Dubbs, 6 months ago

Summary: systemd-257.4 (Wait for next major version) → systemd-257.5 (Wait for next major version)

Now version 257.5.

comment:2 by Bruce Dubbs, 6 months ago

Milestone: 12.4 → Future

comment:3 by Douglas R. Reno, 4 months ago

Priority: normal → highest
Summary: systemd-257.5 (Wait for next major version) → systemd-257.6

Bring 257.6 in due to CVE-2025-4598, which allows for local information disclosure (and in some cases privilege escalation) in systemd-coredump. A proof of concept exists that dumps the memory of sshd.

comment:4 by Douglas R. Reno, 4 months ago

Milestone: Future → 12.4

comment:5 by Douglas R. Reno, 4 months ago

The man pages tarball has now been uploaded to anduin

comment:6 by Douglas R. Reno, 4 months ago

systemd doesn't do any NEWS updates for minor versions, but the complete gitlog can be found here: ​https://github.com/systemd/systemd/compare/v257.3...v257.6

comment:7 by Bruce Dubbs, 4 months ago

Resolution: → fixed
Status: new → closed

Fixed in trunk from the gcc15 branch.

comment:8 by Douglas R. Reno, 4 months ago

SA-12.3-044 issued

Note: See TracTickets for help on using tickets.