Changeset 8b4fb12

Timestamp:

12/30/2023 06:35:25 PM (5 months ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

12.1, 12.1-rc1, multilib, trunk, xry111/arm64, xry111/clfs-ng, xry111/loongarch, xry111/loongarch-12.1, xry111/mips64el, xry111/update-glibc

Children:

6fec3f5

Parents:

d4ce302c

git-author:

Xi Ruoyao <xry111@…> (12/30/2023 06:04:21 PM)

git-committer:

Xi Ruoyao <xry111@…> (12/30/2023 06:35:25 PM)

Message:

systemd: Fix CVE-2023-7008 (#5405)

Files:

• chapter01/changelog.xml (modified) (1 diff)
• chapter08/systemd.xml (modified) (1 diff)

chapter01/changelog.xml

@@ -45 +45 @@
       <itemizedlist>
         <listitem>
+          <para>[xry111] - Fix CVE-2023-7008 for systemd-255.  Fixes
+          <ulink url='&lfs-ticket-root;5405'>#5405</ulink>.</para>
+        </listitem>
+        <listitem>
           <para>[xry111] - Update to iana-etc-20231205.  Addresses
           <ulink url='&lfs-ticket-root;5006'>#5006</ulink>.</para>

chapter08/systemd.xml

@@ -48 +48 @@
  <screen><userinput remap="pre">sed -i -e 's/GROUP="render"/GROUP="video"/' \
        -e 's/GROUP="sgx", //' rules.d/50-udev-default.rules.in</userinput></screen>
+
+    <!-- https://github.com/systemd/systemd/pull/30549 -->
+    <para>Now fix a security vulnerability in the DNSSEC verification of
+    <command>systemd-resolved</command>:</para>
+
+<screen><userinput remap='pre'>sed -e '/return FLAGS_SET.*AUTHENTICATED/s/(t/(dt/' \
+    -i src/resolve/resolved-dns-transaction.c</userinput></screen>
 
     <para>Prepare systemd for compilation:</para>