=========================================================================Ubuntu Security Notice USN-4120-2 September 10, 2019 systemd regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.04 LTS Summary: USN-4120-1 caused a regression in systemd. Software Description: - systemd: system and service manager Details: USN-4120-1 fixed a vulnerability in systemd. The update included a recent SRU from the updates pocket that introduced networking problems for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the systemd-resolved D-Bus interface did not enforce appropriate access controls. A local unprivileged user could exploit this to modify a system's DNS resolver settings. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: systemd 240-6ubuntu5.7 Ubuntu 18.04 LTS: systemd 237-3ubuntu10.29 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4120-2 https://ubuntu.com/security/notices/USN-4120-1 https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1842651 Package Information: https://launchpad.net/ubuntu/+source/systemd/240-6ubuntu5.7 https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.29
The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: systemd 240-6ubuntu5.7 Ubuntu 18.04 LTS: systemd 237-3ubuntu10.29 After a standard system update you need to reboot your computer to make all the necessary changes.
https://ubuntu.com/security/notices/USN-4120-2
https://ubuntu.com/security/notices/USN-4120-1
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1842651
https://launchpad.net/ubuntu/+source/systemd/240-6ubuntu5.7 https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.29
Get the latest Linux and open source security news straight to your inbox.