Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-boot-unsigned | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-container | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-container-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-debugsource | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-devel | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-journal-remote | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-journal-remote-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-libs | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-libs-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-oomd | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-oomd-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-pam | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-pam-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-resolved | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-resolved-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-rpm-macros | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-tests-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-udev | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-udev-debuginfo | 0:257-23.el10 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | systemd-ukify | 0:257-23.el10 |
Vulnerabilities 1
-
Medium 4.7
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc…
References
-
article
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.2_release_notes/index
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2369242
-
article
https://issues.redhat.com/browse/RHEL-108006
-
article
https://issues.redhat.com/browse/RHEL-109552
-
article
https://issues.redhat.com/browse/RHEL-109902
-
article
https://issues.redhat.com/browse/RHEL-112203
-
article
https://issues.redhat.com/browse/RHEL-112205
-
article
https://issues.redhat.com/browse/RHEL-113051
-
article
https://issues.redhat.com/browse/RHEL-114414
-
article
https://issues.redhat.com/browse/RHEL-115001
-
article
https://issues.redhat.com/browse/RHEL-128767
-
article
https://issues.redhat.com/browse/RHEL-129179
-
article
https://issues.redhat.com/browse/RHEL-143029
-
article
https://issues.redhat.com/browse/RHEL-143034
-
article
https://issues.redhat.com/browse/RHEL-143036
-
article
https://issues.redhat.com/browse/RHEL-53112
-
article
https://issues.redhat.com/browse/RHEL-72702
-
article
https://issues.redhat.com/browse/RHEL-72813
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18153.json
-
report
https://access.redhat.com/security/cve/CVE-2025-4598
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-4598
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-4598
-
article
https://www.openwall.com/lists/oss-security/2025/05/29/3