Fedora 30: FEDORA-2019-ac2a21ff07 moderate: systemd execution risk

systemd is a system and service manager that runs as PID 1 and starts

the rest of the system. It provides aggressive parallelization

capabilities, uses socket and D-Bus activation for starting services,

offers on-demand starting of daemons, keeps track of processes using

Linux control groups, maintains mount and automount points, and

implements an elaborate transactional dependency-based service control

logic. systemd supports SysV and LSB init scripts and works as a

replacement for sysvinit. Other parts of this package are a logging daemon,

utilities to control basic system configuration like the hostname,

date, locale, maintain a list of logged-in users, system accounts,

runtime directories and settings, and daemons to manage simple network

configuration, network time synchronization, log forwarding, and name

resolution.

This package was built from the 241-stable branch of systemd,

commit https://github.com/systemd/systemd-stable/commit/a2eaa1c.

This update fixes a [bug](https://github.com/mesonbuild/meson/issues/5268) in

the Meson build system which caused binaries and libraries to incorrectly be

marking as requiring an executable stack. This makes them more vulnerable to

security issues, and also can result in errors caused by SELinux denials. This

update also provides rebuilds of all the packages that were built with the buggy

Meson, excepting packages for updates were already pending (in those cases,

those updates have been edited instead). This includes gnome-initial-setup,

which was affected by this problem, resulting in a [release-blocking

bug](https://bugzilla.redhat.com/show_bug.cgi?id=1699099) that prevented it

running correctly with SELinux in enforcing mode.

[ 1 ] Bug #1699099 - gnome-initial-setup 3.32.0+ crashes due to SELinux denials (because it has execstack flag set, because meson 0.50.0 sets it when it shouldn't)

https://bugzilla.redhat.com/show_bug.cgi?id=1699099

su -c 'dnf upgrade --advisory FEDORA-2019-ac2a21ff07' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/