ALT-PU-2019-1690: package systemd update to version 242-alt1
Описание
This update upgrades systemd to version 242-alt1.
Устраненные уязвимости6
Связанные уязвимости
ELSA-2020-1794: systemd security, bug fix, and enhancement update (MODERATE)
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".