Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in systemd
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in systemd
ID: FEDORA-2013-17203
Distribution: Fedora
Plattformen: Fedora 18
Datum: Mo, 23. September 2013, 08:03
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4327
Applikationen: systemd

Originalnachricht

Name        : systemd
Product : Fedora 18
Version : 201
Release : 2.fc18.8
URL : http://www.freedesktop.org/wiki/Software/systemd
Summary : A System and Service Manager
Description :
systemd is a system and service manager for Linux, compatible with
SysV and LSB init scripts. systemd provides aggressive parallelization
capabilities, uses socket and D-Bus activation for starting services,
offers on-demand starting of daemons, keeps track of processes using
Linux cgroups, supports snapshotting and restoring of the system
state, maintains mount and automount points and implements an
elaborate transactional dependency-based service control logic. It can
work as a drop-in replacement for sysvinit.

-------------------------------------------------------------------------------
-
Update Information:

Fixes polkit authentication issue.
-------------------------------------------------------------------------------
-
ChangeLog:

* Wed Sep 18 2013 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> -
201-2.fc18.8
- Fix polkit authentication issue (#1006680).
* Fri May 17 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.7
- Pick fileio fixes for environment files (#964132).
- Drop isdn.service from default preset (Lennart, #959793).
* Tue May 7 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.6
- Avoid sysctl.d precedence rules change (#924433).
- More patches from upstream.
- Add vmtoolsd.service to 90-default.preset (Lennart).
* Wed Apr 17 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.5
- Added 4 more fixes from upstream:
- Fix broken _SOURCE_REALTIME_TIMESTAMP and _MACHINE_ID journal tags.
- Fix a journald crash.
- Fix a systemd crash in device units with certain udev rules.
- Keep the console in unicode mode for LANG=C.
* Mon Apr 15 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.4
- Ship a dummy syslog.target (#951957).
- Update README.Fedora-18.
* Mon Apr 15 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.3
- Fix parsing of envfiles with empty lines (#951866).
* Thu Apr 11 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.2
- Do not create /var/log/journal in F18.
- Downgrade error message about non-isolatable default target to debug level.
- Do not ship changed sysctl defaults in F18.
* Wed Apr 10 2013 Michal Schmidt <mschmidt@redhat.com> - 201-2.fc18.1
- Update to upstream release v201 from F19.
- Back out selected changes to avoid incompatibilities in a stable release.
- Add selected post-v201 patches from upstream.
- Pull NM-wait-online in from network-online.target.wants (stopgap).
- Added README.Fedora-18 describing differences from upstream.
* Mon Jan 28 2013 Michal Schmidt <mschmidt@redhat.com> - 197-1.fc18.2
- Revert a couple of patches causing surprising breakage.
- Resolves: #896135, #903716
- Pick more post-v197 fixes and minor enhancements from upstream.
- Resolves: #873634, #875531, #860464, #889624, #890827, #756787, #757928
* Sat Jan 12 2013 Michal Schmidt <mschmidt@redhat.com> - 197-1.fc18.1
- Pick post-v197 fixes.
* Fri Jan 11 2013 Michal Schmidt <mschmidt@redhat.com> - 197-1
- Rebase to new upstream release.
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1006680 - CVE-2013-4327 systemd: insecure calling of polkit
https://bugzilla.redhat.com/show_bug.cgi?id=1006680
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update systemd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung