Oval Definition:oval:org.opensuse.security:def:81208
Revision Date:2017-07-19Version:1
Title:Security update for systemd, dracut (Important)
Description:

This update for systemd and dracut fixes the following issues:

Security issues fixed:

- CVE-2017-9445: Possible out-of-bounds write triggered by a specially crafted TCP payload from a DNS server. (bsc#1045290)

Non-security issues fixed in systemd:

- Automounter issue in combination with NFS volumes (bsc#1040968) - Missing symbolic link for SAS device in /dev/disk/by-path (bsc#1040153) - Add minimal support for boot.d/* scripts in systemd-sysv-convert (bsc#1046750)

Non-security issues fixed in dracut:

- Bail out if module directory does not exist. (bsc#1043900) - Suppress bogus error message. (bsc#1032029) - Fix module force loading with systemd. (bsc#986216) - Ship udev files required by systemd. (bsc#1040153) - Ignore module resolution errors (e.g. with kgraft). (bsc#1037120)
Family:unixClass:patch
Status:Reference(s):1032029
1033238
1037120
1040153
1040968
1043900
1045290
1046750
986216
CVE-2017-9445
SUSE-SU-2017:1898-1
Platform(s):SUSE Linux Enterprise Server 12 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • dracut-044.1-109.8.3 is installed
  • OR dracut-fips-044.1-109.8.3 is installed
  • OR libsystemd0-228-150.7.1 is installed
  • OR libsystemd0-32bit-228-150.7.1 is installed
  • OR libudev1-228-150.7.1 is installed
  • OR libudev1-32bit-228-150.7.1 is installed
  • OR systemd-228-150.7.1 is installed
  • OR systemd-32bit-228-150.7.1 is installed
  • OR systemd-bash-completion-228-150.7.1 is installed
  • OR systemd-sysvinit-228-150.7.1 is installed
  • OR udev-228-150.7.1 is installed
  • BACK