Summary: | <sys-apps/systemd-239-r2: multiple vulnerabilities (CVE-2018-{15686,15687}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | D'juan McDonald (domhnall) <flopwiki> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | critical | CC: | alexander, systemd |
Priority: | Normal | Flags: | stable-bot:
sanity-check+
|
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: |
https://github.com/systemd/systemd/pull/10519 https://github.com/systemd/systemd/pull/10517 |
||
Whiteboard: | A1 [glsa+ cve] | ||
Package list: |
sys-apps/systemd-239-r2
|
Runtime testing required: | --- |
Bug Depends on: | |||
Bug Blocks: | 669716 |
Description
D'juan McDonald (domhnall)
2018-10-26 10:34:36 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9189edf61c8e135c0cd28be3534d7624cafff239 commit 9189edf61c8e135c0cd28be3534d7624cafff239 Author: Mike Gilbert <floppym@gentoo.org> AuthorDate: 2018-10-28 22:53:46 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2018-10-28 23:21:05 +0000 sys-apps/systemd: backport several patches for 239 Closes: https://bugs.gentoo.org/662776 Bug: https://bugs.gentoo.org/669664 Bug: https://bugs.gentoo.org/669716 Package-Manager: Portage-2.3.51_p2, Repoman-2.3.11_p27 Signed-off-by: Mike Gilbert <floppym@gentoo.org> sys-apps/systemd/Manifest | 1 + sys-apps/systemd/systemd-239-r2.ebuild | 448 +++++++++++++++++++++++++++++++++ 2 files changed, 449 insertions(+) Let's stabilize sys-apps/systemd-239-r2. amd64 stable arm64 stable ia64 stable The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e815d3e67234fd9672992bfb3bcfea2588164d4c commit e815d3e67234fd9672992bfb3bcfea2588164d4c Author: Mike Gilbert <floppym@gentoo.org> AuthorDate: 2018-10-30 14:32:29 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2018-10-30 14:33:29 +0000 sys-apps/systemd: remove old Bug: https://bugs.gentoo.org/669664 Package-Manager: Portage-2.3.51_p2, Repoman-2.3.11_p27 Signed-off-by: Mike Gilbert <floppym@gentoo.org> sys-apps/systemd/Manifest | 5 - sys-apps/systemd/files/238-initctl.patch | 46 --- sys-apps/systemd/files/238-libmount-include.patch | 72 ---- sys-apps/systemd/files/238-nspawn-wait.patch | 83 ---- sys-apps/systemd/files/238-sparc-raw-clone.patch | 42 -- .../systemd/files/238-timesync-connection.patch | 49 --- sys-apps/systemd/systemd-236-r5.ebuild | 437 -------------------- sys-apps/systemd/systemd-238-r7.ebuild | 440 -------------------- sys-apps/systemd/systemd-239-r1.ebuild | 448 --------------------- sys-apps/systemd/systemd-239.ebuild | 446 -------------------- 10 files changed, 2068 deletions(-) New GLSA request filed. This issue was resolved and addressed in GLSA 201810-10 at https://security.gentoo.org/glsa/201810-10 by GLSA coordinator Thomas Deutschmann (whissi). |