Stay Secure with the Latest Linux Advisories

security advisoryhigh severityupdate

Fedora 31: 2019-d5bd5f0aa4 Critical: DNS Change Control Issue

- Update to latest release - Emission of Session property-changed notifications from logind is fixed (this was breaking the switching of sessions to and from gnome). - Security issue: unprivileged users were allowed to change DNS servers configured in systemd-resolved. Now proper polkit authorization is required (CVE-2019-15718). Switching ttys will work again after reboot. Otherwise, no. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-d5bd5f0aa4 2019-09-04 20:54:30.297699 --------------------------------------------------------------------------------Name : systemd Product : Fedora 31 Version : 243 Release : 1.fc31 URL : https://https:// Summary : System and Service Manager Description : systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. systemd supports SysV and LSB init scripts and works as a replacement for sysvinit. Other parts of this package are a logging daemon, utilities to control basic system configuration like the hostname, date, locale, maintain a list of logged-in users, system accounts, runtime directories and settings, and daemons to manage simple network configuration, network time synchronization, log forwarding, and name resolution. --------------------------------------------------------------------------------Update Information: - Update to latest release - Emission of Session property-changed notifications from logind is fixed (this was breaking the switching of sessions to and from gnome). - Security issue: unprivileged users were allowed to change DNS servers configured in systemd-resolved. Nowproper polkit authorization is required (CVE-2019-15718). Switching ttys will work again after reboot. Otherwise, no log out or reboot is required. --------------------------------------------------------------------------------References: [ 1 ] Bug #1748401 - systemd: need freeze exception for F31 beta https://bugzilla.redhat.com/show_bug.cgi?id=1748401 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-d5bd5f0aa4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Post the Fedora 31 systemd revision, significant DNS connectivity issues have been resolved with improved session oversight and access rights.. Fedora 31 Systemd Issue, Security Update, DNS Access Control, Polkit Authorization. . Severity: Critical. LinuxSecurity.com Team

Sep 04, 2019 •Critical Fedora