File _patchinfo of Package patchinfo.38970

<patchinfo incident="38970">
  <issue tracker="bnc" id="1243935">VUL-0: CVE-2025-4598: systemd: systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump</issue>
  <issue tracker="bnc" id="1242827">L3: systemd: real_journal_next() calls journal_file_fstat() after every line and multiplied by each journal file</issue>
  <issue tracker="cve" id="2025-4598"/>
  <packager>fbui</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for systemd</summary>
  <description>This update for systemd fixes the following issues:

- CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).

Other bugfixes:

- logs-show: get timestamp and boot ID only when necessary (bsc#1242827).
</description>
</patchinfo>
openSUSE Build Service is sponsored by