https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T11:41:30.078510+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-48992 CVE-2024-48992 2026-10-12T11:41:30.100260+00:00

Affected: needrestart, needrestart_project needrestart

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.

 https://cve.radiocsirt.org/vuln/usn-7117-1 USN-7117-1 — Several security issues were fixed in needrestart and Module::ScanDeps 2026-10-12T11:41:30.100311+00:00

Affected: Ubuntu:Pro:16.04:LTS: libmodule-scandeps-perl, Ubuntu:Pro:16.04:LTS: needrestart, Ubuntu:Pro:18.04:LTS: libmodule-scandeps-perl, Ubuntu:Pro:18.04:LTS: needrestart, Ubuntu:Pro:20.04:LTS: libmodule-scandeps-perl, Ubuntu:Pro:20.04:LTS: needrestart, Ubuntu:22.04:LTS: libmodule-scandeps-perl, Ubuntu:22.04:LTS: needrestart, Ubuntu:24.04:LTS: libmodule-scandeps-perl, Ubuntu:24.04:LTS: needrestart

Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-11003)

Qualys discovered that the library libmodule-scandeps-perl incorrectly parsed perl code. This could allow a local attacker to execute arbitrary shell commands. (CVE-2024-10224)

Qualys discovered that needrestart incorrectly used the PYTHONPATH environment variable to spawn a new Python interpreter. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-48990)

Qualys discovered that needrestart incorrectly checked the path to the Python interpreter. A local attacker could possibly use this issue to win a race condition and execute arbitrary code as root. (CVE-2024-48991)

Qualys discovered that needrestart incorrectly used the RUBYLIB environment variable to spawn a new Ruby interpreter. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-48992)