Lucene search

K
suseSuseSUSE-SU-2017:1898-1
HistoryJul 19, 2017 - 3:09 p.m.

Security update for systemd, dracut (important)

2017-07-1915:09:58
lists.opensuse.org
79

0.528 Medium

EPSS

Percentile

97.3%

This update for systemd and dracut fixes the following issues:

Security issues fixed:

  • CVE-2017-9445: Possible out-of-bounds write triggered by a specially
    crafted TCP payload from a DNS server. (bsc#1045290)

Non-security issues fixed in systemd:

  • Automounter issue in combination with NFS volumes (bsc#1040968)
  • Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153)
  • Add minimal support for boot.d/* scripts in systemd-sysv-convert
    (bsc#1046750)

Non-security issues fixed in dracut:

  • Bail out if module directory does not exist. (bsc#1043900)
  • Suppress bogus error message. (bsc#1032029)
  • Fix module force loading with systemd. (bsc#986216)
  • Ship udev files required by systemd. (bsc#1040153)
  • Ignore module resolution errors (e.g. with kgraft). (bsc#1037120)