File _patchinfo of Package patchinfo.38970
<patchinfo incident="38970">
<issue tracker="bnc" id="1243935">VUL-0: CVE-2025-4598: systemd: systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump</issue>
<issue tracker="bnc" id="1242827">L3: systemd: real_journal_next() calls journal_file_fstat() after every line and multiplied by each journal file</issue>
<issue tracker="cve" id="2025-4598"/>
<packager>fbui</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for systemd</summary>
<description>This update for systemd fixes the following issues:
- CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).
Other bugfixes:
- logs-show: get timestamp and boot ID only when necessary (bsc#1242827).
</description>
</patchinfo>