Lucene search

K
mageiaGentoo FoundationMGASA-2021-0304
HistoryJul 01, 2021 - 2:58 a.m.

Updated systemd packages fix a security vulnerability

2021-07-0102:58:41
Gentoo Foundation
advisories.mageia.org
69

0.0004 Low

EPSS

Percentile

12.1%

A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or “0x” followed by hexadecimal digits. When the usernames are used by systemd, for example in service units, an unexpected user may be used instead. In some particular configurations, this flaw allows local attackers to elevate their privileges (CVE-2020-13776).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchsystemd< 241-8.6systemd-241-8.6.mga7