From dac6611c92181505d45a6a7291c6fc6d2f2fcf18 Mon Sep 17 00:00:00 2001 From: Guillem Jover Date: Mon, 2 Jun 2025 10:23:40 +0200 Subject: [PATCH] MT#62935 Update sysctl kernel.core_pattern for systemd 257.6-1 security update MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The systemd package got a security update in Debian trixie, which changed the systemd-coredump kernel sysctl core_pattern value (by appending « %d %F»). This is part of the fix for CVE-2025-4598. This has caused ngcp-system-tests to fail to match the new pattern, so we need to adapt it for all currently supported Debian trixie releases. In addition for Debian trixie, a new enough Linux kernel is required to benefit from the full security fix. Ref: https://security-tracker.debian.org/tracker/CVE-2025-4598 Ref: https://github.com/systemd/systemd-stable/commit/2eb46dce078334805c547cbcf5e6462cf9d2f9f0 Change-Id: I89e6ff1d084403e6ae4b4eca6f5606b0d2417c01 --- templates/610_kernel-sysctl-params.yaml.tt2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/610_kernel-sysctl-params.yaml.tt2 b/templates/610_kernel-sysctl-params.yaml.tt2 index 8dd5302..53445c4 100644 --- a/templates/610_kernel-sysctl-params.yaml.tt2 +++ b/templates/610_kernel-sysctl-params.yaml.tt2 @@ -5,7 +5,7 @@ kernel-param: kernel.core_pattern: {{if ge .Env.DEBIAN_RELEASE "13"}} - value: "|/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h" + value: "|/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h %d %F" {{else}} value: "|/lib/systemd/systemd-coredump %P %u %g %s %t 9223372036854775808 %h %d" {{end}}