Bug#1106785: systemd: CVE-2025-4598: Local information disclosure in systemd-coredump

[Salvatore Bonaccorso]

Source: systemd
Version: 257.5-2
Severity: grave
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
Control: found -1 252.36-1~deb12u1
Control: fixed -1 252.37-1~deb12u1

Hi,

The following vulnerability was published for systemd.

Mainly to bring the issue for an unblock on the radar to the
release team (otherwise already handled by Luca).

CVE-2025-4598[0]:
| Local information disclosure in systemd-coredump

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-4598
    https://www.cve.org/CVERecord?id=CVE-2025-4598
[1] https://www.qualys.com/2025/05/29/apport-coredump/apport-coredump.txt

Regards,
Salvatore