https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-48992.htmlhttps://patchthecve.com/cve/CVE-2024-48992.htmlWed, 17 Jun 2026 07:59:12 +0000HIGH 7.8: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.https://patchthecve.com/cve/CVE-2024-48991.htmlhttps://patchthecve.com/cve/CVE-2024-48991.htmlWed, 17 Jun 2026 07:59:11 +0000HIGH 7.8: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter (instead of the system's real Python interpreter). The initial security fix (6ce6136) https://patchthecve.com/cve/CVE-2024-48990.htmlhttps://patchthecve.com/cve/CVE-2024-48990.htmlWed, 17 Jun 2026 07:59:11 +0000HIGH 7.8: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.https://patchthecve.com/cve/CVE-2024-11003.htmlhttps://patchthecve.com/cve/CVE-2024-11003.htmlWed, 17 Jun 2026 06:56:51 +0000HIGH 7.8: Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps.