Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-container | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-container-debuginfo | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-debuginfo | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-debugsource | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-devel | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-journal-remote | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-journal-remote-debuginfo | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-libs | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-libs-debuginfo | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-pam | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-pam-debuginfo | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-tests | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-tests-debuginfo | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-udev | 0:239-82.el8 |
| Red Hat · RHEL 8 enterprise_linux:8::baseos | systemd-udev-debuginfo | 0:239-82.el8 |
Vulnerabilities 1
-
Medium 5.9
Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2222672
-
article
https://issues.redhat.com/browse/RHEL-18302
-
article
https://issues.redhat.com/browse/RHEL-22426
-
article
https://issues.redhat.com/browse/RHEL-2857
-
article
https://issues.redhat.com/browse/RHEL-5863
-
article
https://issues.redhat.com/browse/RHEL-5991
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3203.json
-
report
https://access.redhat.com/security/cve/CVE-2023-7008
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-7008
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-7008
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2222261
-
article
https://github.com/systemd/systemd/issues/25676