Branch p8 update bulletin.

Package systemd updated to version 239-alt1.M80P.1 for branch p8 in task 226956.

Published: 2018-01-24

BDU:2019-02469

Уязвимость компонента systemd-tmpfiles демона Systemd, позволяющая нарушителю получить доступ к произвольным файлам

Severity: HIGH (7.8) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

CVE-2018-6954

Published: 2013-10-29
Modified: 2024-11-21

CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.

Severity: LOW (3.3)

References:

Published: 2018-02-13
Modified: 2024-11-21

CVE-2018-6954

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.

Severity: HIGH (7.8) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

нужна явная зависимость от systemd

Package update-kernel updated to version 0.9.11-alt2 for branch p8 in task 227060.

[FR] Добавить ключ -y

Version: 2.1.0

Branch p8 update on 2019-04-19

ALT-BU-2019-3612-1

ALT-PU-2019-1684-1

Closed vulnerabilities

BDU:2019-02469

CVE-2013-4392

CVE-2018-6954

Closed bugs

Bug #36267

ALT-PU-2019-1686-1

Closed bugs

Bug #35283