Advisory ROSA-SA-2024-2459

Software: systemd 239
OS: ROSA Virtualization 2.1

package_evr_string: systemd-239

CVE-ID: CVE-2018-21029
BDU-ID: None
CVE-Crit: CRITICAL.
CVE-DESC.: systemd accepts any certificate signed by a trusted certificate authority for DNS Over TLS. No server name indication (SNI) is sent, and there is no hostname validation with the GnuTLS backend.
CVE-STATUS: Not Relevant
CVE-REV:

CVE-ID: CVE-2023-26604
BDU-ID: 2023-03862
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the systemctl status command of the Systemd service initialization and management subsystem is related to access control weaknesses. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial-of-service condition
CVE-STATUS: Not Relevant
CVE-REV: