Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:1370-1

Опубликовано: 18 окт. 2021
Источник: suse-cvrf

Описание

Security update for systemd

This update for systemd fixes the following issues:

  • CVE-2021-33910: Fixed use of strdupa() on a path (bsc#1188063).

  • logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018).

  • Adopting BFQ to control I/O (jsc#SLE-21032, bsc#1134353).

  • Rules weren't applied to dm devices (multipath) (bsc#1188713).

  • Ignore obsolete 'elevator' kernel parameter (bsc#1184994, bsc#1190234).

  • Make sure the versions of both udev and systemd packages are always the same (bsc#1189480).

  • Avoid error message when udev is updated due to udev being already active when the sockets are started again (bsc#1188291).

  • Allow the systemd sysusers config files to be overriden during system installation (bsc#1171962).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
libsystemd0-234-lp152.31.34.1
libsystemd0-32bit-234-lp152.31.34.1
libsystemd0-mini-234-lp152.31.34.1
libudev-devel-234-lp152.31.34.1
libudev-devel-32bit-234-lp152.31.34.1
libudev-mini-devel-234-lp152.31.34.1
libudev-mini1-234-lp152.31.34.1
libudev1-234-lp152.31.34.1
libudev1-32bit-234-lp152.31.34.1
nss-myhostname-234-lp152.31.34.1
nss-myhostname-32bit-234-lp152.31.34.1
nss-mymachines-234-lp152.31.34.1
nss-mymachines-32bit-234-lp152.31.34.1
nss-systemd-234-lp152.31.34.1
systemd-234-lp152.31.34.1
systemd-32bit-234-lp152.31.34.1
systemd-bash-completion-234-lp152.31.34.1
systemd-container-234-lp152.31.34.1
systemd-coredump-234-lp152.31.34.1
systemd-devel-234-lp152.31.34.1
systemd-journal-remote-234-lp152.31.34.1
systemd-logger-234-lp152.31.34.1
systemd-mini-234-lp152.31.34.1
systemd-mini-bash-completion-234-lp152.31.34.1
systemd-mini-container-mini-234-lp152.31.34.1
systemd-mini-coredump-mini-234-lp152.31.34.1
systemd-mini-devel-234-lp152.31.34.1
systemd-mini-sysvinit-234-lp152.31.34.1
systemd-network-234-lp152.31.34.1
systemd-sysvinit-234-lp152.31.34.1
udev-234-lp152.31.34.1
udev-mini-234-lp152.31.34.1

Ссылки

Описание

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.

Затронутые продукты
openSUSE Leap 15.2:libsystemd0-234-lp152.31.34.1
openSUSE Leap 15.2:libsystemd0-32bit-234-lp152.31.34.1
openSUSE Leap 15.2:libsystemd0-mini-234-lp152.31.34.1
openSUSE Leap 15.2:libudev-devel-234-lp152.31.34.1
Ссылки