Multiple vulnerabilities have been discovered in needrestart, the worst of which allowing root privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/needrestart | * | < 3.8 | >= 3.8 |
needrestart is a tool to restart daemons after library updates.
Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details.
An attacker could achieve root privilege escalation.
There is no known workaround at this time.
All needrestart users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/needrestart-3.8"