Security update for systemd SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2016:2522-1 Final 1 1 2016-10-13T07:00:22Z current 2016-10-13T07:00:22Z 2016-10-13T07:00:22Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for systemd This update for systemd fixes the following issues: - CVE-2016-7796: A zero-length message received over systemd's notification socket could make manager_dispatch_notify_fd() return an error and, as a side effect, disable the notification handler completely. As the notification socket is world-writable, this could have allowed a local user to perform a denial-of-service attack against systemd. (bsc#1001765) Additionally, the following non-security fixes are included: - Fix HMAC calculation when appending a data object to journal. (bsc#1000435) - Never accept file descriptors from file systems with mandatory locking enabled. (bsc#954374) - Do not warn about missing install info with "preset". (bsc#970293) - Save /run/systemd/users/UID before starting user@.service. (bsc#996269) - Make sure that /var/lib/systemd/sysv-convert/database is always initialized. (bsc#982211) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00026.html E-Mail link for openSUSE-SU-2016:2522-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE 13.2 libgudev-1_0-0-210.1475218254.1e76ce0-25.48.1 libgudev-1_0-0-32bit-210.1475218254.1e76ce0-25.48.1 libgudev-1_0-0-debuginfo-210.1475218254.1e76ce0-25.48.1 libgudev-1_0-0-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 libgudev-1_0-devel-210.1475218254.1e76ce0-25.48.1 libudev-devel-210.1475218254.1e76ce0-25.48.1 libudev-mini-devel-210.1475218254.1e76ce0-25.48.1 libudev-mini1-210.1475218254.1e76ce0-25.48.1 libudev-mini1-debuginfo-210.1475218254.1e76ce0-25.48.1 libudev1-210.1475218254.1e76ce0-25.48.1 libudev1-32bit-210.1475218254.1e76ce0-25.48.1 libudev1-debuginfo-210.1475218254.1e76ce0-25.48.1 libudev1-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 nss-myhostname-210.1475218254.1e76ce0-25.48.1 nss-myhostname-32bit-210.1475218254.1e76ce0-25.48.1 nss-myhostname-debuginfo-210.1475218254.1e76ce0-25.48.1 nss-myhostname-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 systemd-210.1475218254.1e76ce0-25.48.1 systemd-32bit-210.1475218254.1e76ce0-25.48.1 systemd-bash-completion-210.1475218254.1e76ce0-25.48.1 systemd-debuginfo-210.1475218254.1e76ce0-25.48.1 systemd-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 systemd-debugsource-210.1475218254.1e76ce0-25.48.1 systemd-devel-210.1475218254.1e76ce0-25.48.1 systemd-journal-gateway-210.1475218254.1e76ce0-25.48.1 systemd-journal-gateway-debuginfo-210.1475218254.1e76ce0-25.48.1 systemd-logger-210.1475218254.1e76ce0-25.48.1 systemd-mini-210.1475218254.1e76ce0-25.48.1 systemd-mini-debuginfo-210.1475218254.1e76ce0-25.48.1 systemd-mini-debugsource-210.1475218254.1e76ce0-25.48.1 systemd-mini-devel-210.1475218254.1e76ce0-25.48.1 systemd-mini-sysvinit-210.1475218254.1e76ce0-25.48.1 systemd-sysvinit-210.1475218254.1e76ce0-25.48.1 typelib-1_0-GUdev-1_0-210.1475218254.1e76ce0-25.48.1 udev-210.1475218254.1e76ce0-25.48.1 udev-debuginfo-210.1475218254.1e76ce0-25.48.1 udev-mini-210.1475218254.1e76ce0-25.48.1 udev-mini-debuginfo-210.1475218254.1e76ce0-25.48.1 libgudev-1_0-0-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libgudev-1_0-0-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libgudev-1_0-0-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libgudev-1_0-0-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libgudev-1_0-devel-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev-devel-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev-mini-devel-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev-mini1-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev-mini1-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev1-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev1-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev1-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 libudev1-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 nss-myhostname-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 nss-myhostname-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 nss-myhostname-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 nss-myhostname-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-bash-completion-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-debugsource-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-devel-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-journal-gateway-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-journal-gateway-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-logger-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-mini-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-mini-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-mini-debugsource-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-mini-devel-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-mini-sysvinit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 systemd-sysvinit-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 typelib-1_0-GUdev-1_0-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 udev-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 udev-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 udev-mini-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 udev-mini-debuginfo-210.1475218254.1e76ce0-25.48.1 as a component of openSUSE 13.2 The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled. CVE-2016-7796 openSUSE 13.2:libgudev-1_0-0-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libgudev-1_0-0-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libgudev-1_0-0-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libgudev-1_0-0-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libgudev-1_0-devel-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev-devel-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev-mini-devel-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev-mini1-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev-mini1-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev1-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev1-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev1-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:libudev1-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:nss-myhostname-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:nss-myhostname-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:nss-myhostname-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:nss-myhostname-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-bash-completion-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-debuginfo-32bit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-debugsource-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-devel-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-journal-gateway-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-journal-gateway-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-logger-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-mini-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-mini-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-mini-debugsource-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-mini-devel-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-mini-sysvinit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:systemd-sysvinit-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:typelib-1_0-GUdev-1_0-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:udev-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:udev-debuginfo-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:udev-mini-210.1475218254.1e76ce0-25.48.1 openSUSE 13.2:udev-mini-debuginfo-210.1475218254.1e76ce0-25.48.1 important 1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P Please Install the update. http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00026.html https://www.suse.com/security/cve/CVE-2016-7796.html CVE-2016-7796 https://bugzilla.suse.com/1001765 SUSE Bug 1001765