Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

SUSE: 2016:2476-1 Important: Systemd DoS Attack Mitigation

suse
Calendar Grey October 7, 2016
Dist Suse Esm H88
Essential SUSE upgrade tackling systemd weaknesses and complications. Mitigate DoS risks promptly with the issued fixes.
An update that solves one vulnerability and has 10 fixes is An update that solves one vulnerability and has 10 fixes is An update that solves one vulnerability and has 10 fixes is ...

Summary

This update for systemd fixes the following security issue: - CVE-2016-7796: A zero-length message received over systemd's notification socket could make manager_dispatch_notify_fd() return an error and, as a side effect, disable the notification handler completely. As the notification socket is world-writable, this could have allowed a local user to perform a denial-of-service attack against systemd. (bsc#1001765) Additionally, the following non-security fixes are included: - Fix HMAC calculation when appending a data object to journal. (bsc#1000435) - Never accept file descriptors from file systems with mandatory locking enabled. (bsc#954374) - Do not warn about missing install info with "preset". (bsc#970293) - Save /run/systemd/users/UID before starting user@.service. (bsc#996269)

References

#1000435 #1001765 #954374 #970293 #982210

#982211 #982251 #987173 #987857 #990074 #996269

Cross- CVE-2016-7796

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP1

SUSE Linux Enterprise Server 12-SP1

SUSE Linux Enterprise Desktop 12-SP1

https://www.suse.com/security/cve/CVE-2016-7796.html

https://bugzilla.suse.com/1000435

https://bugzilla.suse.com/1001765

https://bugzilla.suse.com/954374

https://bugzilla.suse.com/970293

https://bugzilla.suse.com/982210

https://bugzilla.suse.com/982211

https://bugzilla.suse.com/982251

https://bugzilla.suse.com/987173

https://bugzilla.suse.com/987857

https://bugzilla.suse.com/990074

https://bugzilla.suse.com/996269

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2476-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here