Lucene search

K
suseSuseOPENSUSE-SU-2016:2522-1
HistoryOct 13, 2016 - 12:08 p.m.

Security update for systemd (important)

2016-10-1312:08:42
lists.opensuse.org
13

EPSS

0.001

Percentile

20.2%

This update for systemd fixes the following issues:

  • CVE-2016-7796: A zero-length message received over systemd’s
    notification socket could make manager_dispatch_notify_fd() return an
    error and, as a side effect, disable the notification handler
    completely. As the notification socket is world-writable, this could
    have allowed a local user to perform a denial-of-service attack against
    systemd. (bsc#1001765)

Additionally, the following non-security fixes are included:

  • Fix HMAC calculation when appending a data object to journal.
    (bsc#1000435)
  • Never accept file descriptors from file systems with mandatory locking
    enabled. (bsc#954374)
  • Do not warn about missing install info with "preset". (bsc#970293)
  • Save /run/systemd/users/UID before starting [email protected]. (bsc#996269)
  • Make sure that /var/lib/systemd/sysv-convert/database is always
    initialized. (bsc#982211)