Summary
[239-74.0.4.2]
- Fix CVE-2023-26604
- pager: set whenver we invoke a pager (lukas.lipinsky@oracle.com) (#2175624)
- pager: make pager secure when under euid is changed or explicitly requested (lukas.lipinsky@oracle.com) (#2175624)
- pager: lets check SYSTEMD_PAGERSECURE with secure_getenv() (lukas.lipinsky@oracle.com) (#2175624)
- pstore: fix crash and forward dummy arguments instead of NULL (lukas.lipinsky@oracle.com) (#2190151)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | systemd | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-container | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-devel | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-journal-remote | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-libs | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-pam | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-tests | 0:239-74.0.4.el8_8.2 |
| Oracle Linux · 8 | systemd-udev | 0:239-74.0.4.el8_8.2 |
Vulnerabilities 1
-
High 7.8
systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible s…