Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian Bookworm DSA-5815-1 critical: needrestart local access threats

debian
Calendar Grey November 19, 2024
Debian Logo
Ubuntu Security Notice USN-6543-1 addresses several vulnerabilities in the needrestart utility. Users are advised to upgrade to enhance security.
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be restarted after library up...

Summary

Details can be found in the Qualys advisory at
https://https://www.qualys.com/2024/11/19/needrestart/needrestart.txt

For the stable distribution (bookworm), these problems have been fixed in
version 3.6-4+deb12u2.

We recommend that you upgrade your needrestart packages.

For the detailed security status of needrestart please refer to its
security tracker page at:
https://security-tracker.debian.org/tracker/source-package/needrestart

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: needrestart
CVE ID: CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here