Multiple vulnerabilities have been discovered in needrestart, the worst of which allowing root privilege escalation.
| Package | app-admin/needrestart on all architectures |
|---|---|
| Affected versions | < 3.8 |
| Unaffected versions | >= 3.8 |
needrestart is a tool to restart daemons after library updates.
Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details.
An attacker could achieve root privilege escalation.
There is no known workaround at this time.
All needrestart users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/needrestart-3.8"
Release date
August 24, 2026
Latest revision
August 24, 2026: 1
Severity
high
Exploitable
local
Bugzilla entries