Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1049: A race condition was found in systemd. This could result in automount requests not being serviced and processes using them could hang, causing denial of service. 1534701: CVE-2018-1049 systemd: automount: access to automounted volumes can lock up
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libgudev1 | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | libgudev1-devel | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-debuginfo | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-devel | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-journal-gateway | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-libs | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-networkd | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-python | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-resolved | 0:219-42.amzn2.7 |
| Amazon Linux · 2 | systemd-sysv | 0:219-42.amzn2.7 |
Vulnerabilities 1
-
Unscored —CVE-2018-1049 Public exploit
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from k…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-1049.html