Summary
[239-82.0.4.5]
- coredump: use %d in kernel core pattern - CVE-2025-4598
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | systemd | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-container | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-devel | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-journal-remote | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-libs | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-pam | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-tests | 0:239-82.0.4.el8_10.5 |
| Oracle Linux · 8 | systemd-udev | 0:239-82.0.4.el8_10.5 |
Vulnerabilities 1
-
Medium 4.7
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc…