https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T02:41:42.926224+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-10224 CVE-2024-10224 2026-09-29T02:41:43.365525+00:00

Affected: Module::ScanDeps, module_scandeps needrestart

Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by open()ing a "pesky pipe" (such as passing "commands|" as a filename) or by passing arbitrary strings to eval().

 https://vulnerability.circl.lu/vuln/usn-7117-1 USN-7117-1 — Several security issues were fixed in needrestart and Module::ScanDeps 2026-09-29T02:41:43.365646+00:00

Affected: Ubuntu:Pro:16.04:LTS: libmodule-scandeps-perl, Ubuntu:Pro:16.04:LTS: needrestart, Ubuntu:Pro:18.04:LTS: libmodule-scandeps-perl, Ubuntu:Pro:18.04:LTS: needrestart, Ubuntu:Pro:20.04:LTS: libmodule-scandeps-perl, Ubuntu:Pro:20.04:LTS: needrestart, Ubuntu:22.04:LTS: libmodule-scandeps-perl, Ubuntu:22.04:LTS: needrestart, Ubuntu:24.04:LTS: libmodule-scandeps-perl, Ubuntu:24.04:LTS: needrestart

Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-11003)

Qualys discovered that the library libmodule-scandeps-perl incorrectly parsed perl code. This could allow a local attacker to execute arbitrary shell commands. (CVE-2024-10224)

Qualys discovered that needrestart incorrectly used the PYTHONPATH environment variable to spawn a new Python interpreter. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-48990)

Qualys discovered that needrestart incorrectly checked the path to the Python interpreter. A local attacker could possibly use this issue to win a race condition and execute arbitrary code as root. (CVE-2024-48991)

Qualys discovered that needrestart incorrectly used the RUBYLIB environment variable to spawn a new Ruby interpreter. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-48992)