Publishing details
-
Published
-
Copied from
ubuntu xenial in
Private PPA for Ubuntu Security Team
by Marc Deslauriers
Changelog
systemd (229-4ubuntu21.27) xenial-security; urgency=medium
* SECURITY UPDATE: incorrect PIDFile verification
- debian/patches/CVE-2018-16888.patch: be stricter when handling PID
files and MAINPID sd_notify() messages in man/systemd.service.xml,
src/core/manager.c, src/core/service.c, src/core/unit.h,
test/TEST-20-MAINPIDGAMES/Makefile,
test/TEST-20-MAINPIDGAMES/test.sh,
test/TEST-20-MAINPIDGAMES/testsuite.sh, test/test-functions.
- debian/patches/CVE-2018-16888-2.patch: relax PID file symlink chain
checks a bit in src/core/service.c.
- CVE-2018-16888
* SECURITY UPDATE: memory leak in button_open
- debian/patches/CVE-2019-20386.patch: fix event in
src/login/logind-button.c.
- CVE-2019-20386
* SECURITY UPDATE: heap use-after-free with async polkit queries
- debian/patches/CVE-2020-1712-1.patch: on async pk requests,
re-validate action/details in src/shared/bus-util.c.
- debian/patches/CVE-2020-1712-2.patch: introduce API for re-enqueuing
incoming messages in src/libsystemd/libsystemd.sym,
src/libsystemd/sd-bus/sd-bus.c, src/systemd/sd-bus.h.
- debian/patches/CVE-2020-1712-3.patch: when authorizing via PK
re-resolve callback/userdata instead of caching it in
src/shared/bus-util.c.
- debian/patches/CVE-2020-1712-4.patch: fix typo in function name in
src/libsystemd/libsystemd.sym, src/libsystemd/sd-bus/sd-bus.c,
src/systemd/sd-bus.h, src/shared/bus-util.c.
- debian/libsystemd0.symbols: added new symbols.
- CVE-2020-1712
-- Marc Deslauriers <email address hidden> Tue, 04 Feb 2020 20:07:56 -0500
Builds
Built packages
-
libnss-myhostname
nss module providing fallback resolution for the current hostname
-
libnss-myhostname-dbgsym
debug symbols for package libnss-myhostname
-
libnss-mymachines
nss module to resolve hostnames for local container instances
-
libnss-mymachines-dbgsym
debug symbols for package libnss-mymachines
-
libnss-resolve
nss module to resolve names via systemd-resolved
-
libnss-resolve-dbgsym
debug symbols for package libnss-resolve
-
libpam-systemd
system and service manager - PAM module
-
libpam-systemd-dbgsym
debug symbols for package libpam-systemd
-
libsystemd-dev
systemd utility library - development files
-
libsystemd-dev-dbgsym
debug symbols for package libsystemd-dev
-
libsystemd0
systemd utility library
-
libsystemd0-dbgsym
debug symbols for package libsystemd0
-
libudev-dev
libudev development files
-
libudev-dev-dbgsym
debug symbols for package libudev-dev
-
libudev1
libudev shared library
-
libudev1-dbgsym
debug symbols for package libudev1
-
libudev1-udeb
libudev shared library
-
libudev1-udeb-dbgsym
debug symbols for package libudev1-udeb
-
systemd
system and service manager
-
systemd-container
systemd container/nspawn tools
-
systemd-container-dbgsym
debug symbols for package systemd-container
-
systemd-coredump
tools for storing and retrieving coredumps
-
systemd-coredump-dbgsym
debug symbols for package systemd-coredump
-
systemd-dbg
system and service manager (debug symbols)
-
systemd-dbgsym
debug symbols for package systemd
-
systemd-journal-remote
tools for sending and receiving remote journal logs
-
systemd-journal-remote-dbgsym
debug symbols for package systemd-journal-remote
-
systemd-sysv
system and service manager - SysV links
-
systemd-sysv-dbgsym
debug symbols for package systemd-sysv
-
udev
/dev/ and hotplug management daemon
-
udev-dbgsym
debug symbols for package udev
-
udev-udeb
/dev/ and hotplug management daemon
-
udev-udeb-dbgsym
debug symbols for package udev-udeb
Package files