oss-sec mailing list archives
Re: systemd-journald in systemd 259 does not escape characters in emerg messages that are wall'd to other user's terminals
From: Salvatore Bonaccorso <carnil () debian org>
Date: Thu, 9 Apr 2026 08:11:03 +0200
Hi Aaron, On Tue, Apr 07, 2026 at 08:09:06PM -0400, Aaron Rainbolt wrote: [...]
I discovered this while doing work for the Kicksecure and Whonix projects. This bug was reported privately to upstream on December 23, 2025. As per Kicksecure's Vulnerability Disclosure Policy [1], we're disclosing it publicly on April 7, 2026, 90 days + a 14-day grace period later. An upstream bug report can be seen at [2].
JFYI, the reference to the issue: It currently say: "This issue has been deleted.". Is the issue reference correct, was it really deleted or is there a typo? Regards, Salvatore
Current thread:
- systemd-journald in systemd 259 does not escape characters in emerg messages that are wall'd to other user's terminals Aaron Rainbolt (Apr 07)
- Re: systemd-journald in systemd 259 does not escape characters in emerg messages that are wall'd to other user's terminals Aaron Rainbolt (Apr 08)
- Re: systemd-journald in systemd 259 does not escape characters in emerg messages that are wall'd to other user's terminals Salvatore Bonaccorso (Apr 09)
- Re: systemd-journald in systemd 259 does not escape characters in emerg messages that are wall'd to other user's terminals Aaron Rainbolt (May 04)
