Security update for systemd SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2017:0287-1 Final 1 1 2017-01-25T18:01:12Z current 2017-01-25T18:01:12Z 2017-01-25T18:01:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for systemd This update for systemd fixes the following issues: This security issue was fixed: - CVE-2016-10156: Fix permissions set on permanent timer timestamp files, preventing local unprivileged users from escalating privileges (bsc#1020601). These non-security issues were fixed: - Fix permission set on /var/lib/systemd/linger/* - install: follow config_path symlink (#3362) - install: fix disable when /etc/systemd/system is a symlink (bsc#1014560) - run: make --slice= work in conjunction with --scope (bsc#1014566) - core: don't dispatch load queue when setting Slice= for transient units - systemctl: remove duplicate entries showed by list-dependencies (#5049) (bsc#1012266) - rule: don't automatically online standby memory on s390x (bsc#997682) This update was imported from the SUSE:SLE-12-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00058.html E-Mail link for openSUSE-SU-2017:0287-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.2 libsystemd0-228-22.1 libsystemd0-32bit-228-22.1 libsystemd0-mini-228-22.1 libudev-devel-228-22.1 libudev-mini-devel-228-22.1 libudev-mini1-228-22.1 libudev1-228-22.1 libudev1-32bit-228-22.1 nss-myhostname-228-22.1 nss-myhostname-32bit-228-22.1 nss-mymachines-228-22.1 systemd-228-22.1 systemd-32bit-228-22.1 systemd-bash-completion-228-22.1 systemd-devel-228-22.1 systemd-logger-228-22.1 systemd-mini-228-22.1 systemd-mini-bash-completion-228-22.1 systemd-mini-devel-228-22.1 systemd-mini-sysvinit-228-22.1 systemd-sysvinit-228-22.1 udev-228-22.1 udev-mini-228-22.1 libsystemd0-228-22.1 as a component of openSUSE Leap 42.2 libsystemd0-32bit-228-22.1 as a component of openSUSE Leap 42.2 libsystemd0-mini-228-22.1 as a component of openSUSE Leap 42.2 libudev-devel-228-22.1 as a component of openSUSE Leap 42.2 libudev-mini-devel-228-22.1 as a component of openSUSE Leap 42.2 libudev-mini1-228-22.1 as a component of openSUSE Leap 42.2 libudev1-228-22.1 as a component of openSUSE Leap 42.2 libudev1-32bit-228-22.1 as a component of openSUSE Leap 42.2 nss-myhostname-228-22.1 as a component of openSUSE Leap 42.2 nss-myhostname-32bit-228-22.1 as a component of openSUSE Leap 42.2 nss-mymachines-228-22.1 as a component of openSUSE Leap 42.2 systemd-228-22.1 as a component of openSUSE Leap 42.2 systemd-32bit-228-22.1 as a component of openSUSE Leap 42.2 systemd-bash-completion-228-22.1 as a component of openSUSE Leap 42.2 systemd-devel-228-22.1 as a component of openSUSE Leap 42.2 systemd-logger-228-22.1 as a component of openSUSE Leap 42.2 systemd-mini-228-22.1 as a component of openSUSE Leap 42.2 systemd-mini-bash-completion-228-22.1 as a component of openSUSE Leap 42.2 systemd-mini-devel-228-22.1 as a component of openSUSE Leap 42.2 systemd-mini-sysvinit-228-22.1 as a component of openSUSE Leap 42.2 systemd-sysvinit-228-22.1 as a component of openSUSE Leap 42.2 udev-228-22.1 as a component of openSUSE Leap 42.2 udev-mini-228-22.1 as a component of openSUSE Leap 42.2 A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229. CVE-2016-10156 openSUSE Leap 42.2:libsystemd0-228-22.1 openSUSE Leap 42.2:libsystemd0-32bit-228-22.1 openSUSE Leap 42.2:libsystemd0-mini-228-22.1 openSUSE Leap 42.2:libudev-devel-228-22.1 openSUSE Leap 42.2:libudev-mini-devel-228-22.1 openSUSE Leap 42.2:libudev-mini1-228-22.1 openSUSE Leap 42.2:libudev1-228-22.1 openSUSE Leap 42.2:libudev1-32bit-228-22.1 openSUSE Leap 42.2:nss-myhostname-228-22.1 openSUSE Leap 42.2:nss-myhostname-32bit-228-22.1 openSUSE Leap 42.2:nss-mymachines-228-22.1 openSUSE Leap 42.2:systemd-228-22.1 openSUSE Leap 42.2:systemd-32bit-228-22.1 openSUSE Leap 42.2:systemd-bash-completion-228-22.1 openSUSE Leap 42.2:systemd-devel-228-22.1 openSUSE Leap 42.2:systemd-logger-228-22.1 openSUSE Leap 42.2:systemd-mini-228-22.1 openSUSE Leap 42.2:systemd-mini-bash-completion-228-22.1 openSUSE Leap 42.2:systemd-mini-devel-228-22.1 openSUSE Leap 42.2:systemd-mini-sysvinit-228-22.1 openSUSE Leap 42.2:systemd-sysvinit-228-22.1 openSUSE Leap 42.2:udev-228-22.1 openSUSE Leap 42.2:udev-mini-228-22.1 important Please Install the update. https://lists.opensuse.org/opensuse-security-announce/2017-01/msg00058.html https://www.suse.com/security/cve/CVE-2016-10156.html CVE-2016-10156 https://bugzilla.suse.com/1020601 SUSE Bug 1020601 https://bugzilla.suse.com/1021969 SUSE Bug 1021969 https://bugzilla.suse.com/1086936 SUSE Bug 1086936