Security update for systemd

2024-09-0515:05:38

Google

osv.dev

systemd

cve-2023-7008

dnssec

bsc#1218297

unit

systemd-udevd.service

bsc#1226414

rpm macros

bsc#1228091

lsb description

bsc#1221479

update

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

6.6

Confidence

Low

This update for systemd fixes the following issues:

CVE-2023-7008: Fixed man-in-the-middle due to unsigned name response in signed zone not refused when DNSSEC=yes (bsc#1218297)

Other fixes:

Unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414)
Don’t mention any rpm macros inside comments, even if escaped (bsc#1228091)
Skip redundant dependencies specified the LSB description that references the file name of the service itself for early boot scripts (bsc#1221479).