Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1082-1

Опубликовано: 23 июл. 2021
Источник: suse-cvrf

Описание

Security update for systemd

This update for systemd fixes the following issues:

  • CVE-2021-33910: Fixed a denial of service in systemd via unit_name_path_escape() (bsc#1188063)
  • Skip udev rules if 'elevator=' is used (bsc#1184994)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
libsystemd0-234-lp152.31.31.1
libsystemd0-32bit-234-lp152.31.31.1
libsystemd0-mini-234-lp152.31.31.1
libudev-devel-234-lp152.31.31.1
libudev-devel-32bit-234-lp152.31.31.1
libudev-mini-devel-234-lp152.31.31.1
libudev-mini1-234-lp152.31.31.1
libudev1-234-lp152.31.31.1
libudev1-32bit-234-lp152.31.31.1
nss-myhostname-234-lp152.31.31.1
nss-myhostname-32bit-234-lp152.31.31.1
nss-mymachines-234-lp152.31.31.1
nss-mymachines-32bit-234-lp152.31.31.1
nss-systemd-234-lp152.31.31.1
systemd-234-lp152.31.31.1
systemd-32bit-234-lp152.31.31.1
systemd-bash-completion-234-lp152.31.31.1
systemd-container-234-lp152.31.31.1
systemd-coredump-234-lp152.31.31.1
systemd-devel-234-lp152.31.31.1
systemd-journal-remote-234-lp152.31.31.1
systemd-logger-234-lp152.31.31.1
systemd-mini-234-lp152.31.31.1
systemd-mini-bash-completion-234-lp152.31.31.1
systemd-mini-container-mini-234-lp152.31.31.1
systemd-mini-coredump-mini-234-lp152.31.31.1
systemd-mini-devel-234-lp152.31.31.1
systemd-mini-sysvinit-234-lp152.31.31.1
systemd-network-234-lp152.31.31.1
systemd-sysvinit-234-lp152.31.31.1
udev-234-lp152.31.31.1
udev-mini-234-lp152.31.31.1

Ссылки

Описание

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

Затронутые продукты
openSUSE Leap 15.2:libsystemd0-234-lp152.31.31.1
openSUSE Leap 15.2:libsystemd0-32bit-234-lp152.31.31.1
openSUSE Leap 15.2:libsystemd0-mini-234-lp152.31.31.1
openSUSE Leap 15.2:libudev-devel-234-lp152.31.31.1
Ссылки