systemd: Fix CVE-2023-7008 (#5405)

This commit is contained in:
Xi Ruoyao 2023-12-31 02:04:21 +08:00
parent d4ce302c0e
commit 8b4fb1245d
No known key found for this signature in database
GPG Key ID: ACAAD20E19E710E3
2 changed files with 11 additions and 0 deletions

View File

@ -43,6 +43,10 @@
<listitem>
<para>2023-12-31</para>
<itemizedlist>
<listitem>
<para>[xry111] - Fix CVE-2023-7008 for systemd-255. Fixes
<ulink url='&lfs-ticket-root;5405'>#5405</ulink>.</para>
</listitem>
<listitem>
<para>[xry111] - Update to iana-etc-20231205. Addresses
<ulink url='&lfs-ticket-root;5006'>#5006</ulink>.</para>

View File

@ -48,6 +48,13 @@
<screen><userinput remap="pre">sed -i -e 's/GROUP="render"/GROUP="video"/' \
-e 's/GROUP="sgx", //' rules.d/50-udev-default.rules.in</userinput></screen>
<!-- https://github.com/systemd/systemd/pull/30549 -->
<para>Now fix a security vulnerability in the DNSSEC verification of
<command>systemd-resolved</command>:</para>
<screen><userinput remap='pre'>sed -e '/return FLAGS_SET.*AUTHENTICATED/s/(t/(dt/' \
-i src/resolve/resolved-dns-transaction.c</userinput></screen>
<para>Prepare systemd for compilation:</para>
<screen><userinput remap="configure">mkdir -p build