Advisories » MGASA-2018-0058

Updated systemd packages fix security vulnerability

Publication date: 03 Jan 2018
Modification date: 03 Jan 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2017-15908

Description

Updated systemd packages fix security vulnerability:

Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchez independently
discovered that systemd-resolved incorrectly handled certain DNS responses.
A remote attacker could possibly use this issue to cause systemd to
temporarily stop responding, resulting in a denial of service
(CVE-2017-15908).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22294
• https://usn.ubuntu.com/usn/usn-3466-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15908

SRPMS

6/core

• systemd-230-12.2.mga6