[SECURITY] [DLA 3474-1] systemd security update

2023-06-2920:57:16

lists.debian.org

memory leak fix

systemd

cve-2022-3821

buffer overrun

d-bus

onexternalpower

debian 10 buster

security update

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

Debian LTS Advisory DLA-3474-1 [email protected]
https://www.debian.org/lts/security/ Adrian Bunk
June 29, 2023 https://wiki.debian.org/LTS

Package : systemd
Version : 241-7~deb10u10
CVE ID : CVE-2022-3821
Debian Bug : 1021644

A buffer overrun in format_timespan() has been fixed
in systemd, the default init system in Debian.

Additionally, fixes for getting property OnExternalPower via D-Bus
and a memory leak on daemon-reload are also included.

For Debian 10 buster, this problem has been fixed in version
241-7~deb10u10.

We recommend that you upgrade your systemd packages.

For the detailed security status of systemd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/systemd

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10i386libsystemd0-dbgsym< 241-7~deb10u10libsystemd0-dbgsym_241-7~deb10u10_i386.deb
Debian11armhflibnss-systemd-dbgsym< 247.3-7+deb11u2libnss-systemd-dbgsym_247.3-7+deb11u2_armhf.deb
Debian11armelsystemd-journal-remote-dbgsym< 247.3-7+deb11u2systemd-journal-remote-dbgsym_247.3-7+deb11u2_armel.deb
Debian11armellibudev1-udeb< 247.3-7+deb11u2libudev1-udeb_247.3-7+deb11u2_armel.deb
Debian11mips64ellibsystemd0< 247.3-7+deb11u2libsystemd0_247.3-7+deb11u2_mips64el.deb
Debian11amd64libpam-systemd-dbgsym< 247.3-7+deb11u2libpam-systemd-dbgsym_247.3-7+deb11u2_amd64.deb
Debian11armhflibudev1-udeb< 247.3-7+deb11u2libudev1-udeb_247.3-7+deb11u2_armhf.deb
Debian11mips64ellibnss-mymachines-dbgsym< 247.3-7+deb11u2libnss-mymachines-dbgsym_247.3-7+deb11u2_mips64el.deb
Debian10armhflibnss-resolve< 241-7~deb10u10libnss-resolve_241-7~deb10u10_armhf.deb
Debian11armellibnss-mymachines-dbgsym< 247.3-7+deb11u2libnss-mymachines-dbgsym_247.3-7+deb11u2_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	i386	libsystemd0-dbgsym	< 241-7~deb10u10	libsystemd0-dbgsym_241-7~deb10u10_i386.deb
Debian	11	armhf	libnss-systemd-dbgsym	< 247.3-7+deb11u2	libnss-systemd-dbgsym_247.3-7+deb11u2_armhf.deb
Debian	11	armel	systemd-journal-remote-dbgsym	< 247.3-7+deb11u2	systemd-journal-remote-dbgsym_247.3-7+deb11u2_armel.deb
Debian	11	armel	libudev1-udeb	< 247.3-7+deb11u2	libudev1-udeb_247.3-7+deb11u2_armel.deb
Debian	11	mips64el	libsystemd0	< 247.3-7+deb11u2	libsystemd0_247.3-7+deb11u2_mips64el.deb
Debian	11	amd64	libpam-systemd-dbgsym	< 247.3-7+deb11u2	libpam-systemd-dbgsym_247.3-7+deb11u2_amd64.deb
Debian	11	armhf	libudev1-udeb	< 247.3-7+deb11u2	libudev1-udeb_247.3-7+deb11u2_armhf.deb
Debian	11	mips64el	libnss-mymachines-dbgsym	< 247.3-7+deb11u2	libnss-mymachines-dbgsym_247.3-7+deb11u2_mips64el.deb
Debian	10	armhf	libnss-resolve	< 241-7~deb10u10	libnss-resolve_241-7~deb10u10_armhf.deb
Debian	11	armel	libnss-mymachines-dbgsym	< 247.3-7+deb11u2	libnss-mymachines-dbgsym_247.3-7+deb11u2_armel.deb