needrestart: Multiple vulnerabilities — GLSA 202608-22

{
  "id": "206f9926499535c0eacc5ff0834fe85925de68e6aff92aef320d8cd5492afe07",
  "url": "https://security.gentoo.org/glsa/202608-22",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "needrestart: Multiple vulnerabilities — GLSA 202608-22",
    "summary": "Multiple vulnerabilities in needrestart could allow root privilege escalation. Users should upgrade to version 3.8 or later.",
    "evidence": "Multiple vulnerabilities have been discovered in needrestart, the worst of which allowing root privilege escalation.",
    "products": [
      {
        "name": {
          "value": "app-admin/needrestart",
          "evidence": "Package app-admin/needrestart on all architectures"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": ">= 3.8",
            "evidence": "Unaffected versions >= 3.8"
          }
        ],
        "affected_versions": [
          {
            "value": "< 3.8",
            "evidence": "Affected versions < 3.8"
          }
        ]
      }
    ],
    "severity": "high",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2024-11003",
        "evidence": "References CVE-2024-11003"
      },
      {
        "value": "CVE-2024-48990",
        "evidence": "CVE-2024-48990"
      },
      {
        "value": "CVE-2024-48991",
        "evidence": "CVE-2024-48991"
      },
      {
        "value": "CVE-2024-48992",
        "evidence": "CVE-2024-48992"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "Severity high"
  },
  "source_id": "official-gentoo-glsa",
  "document_id": 23656,
  "published_at": "2026-08-24T00:00:00+00:00"
}