[SECURITY] Fedora 31 Update: systemd-243.4-1.fc31
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-4c3ce3aa5c
2019-11-21 01:23:37.354980
--------------------------------------------------------------------------------
Name : systemd
Product : Fedora 31
Version : 243.4
Release : 1.fc31
URL : https://www.freedesktop.org/wiki/Software/systemd
Summary : System and Service Manager
Description :
systemd is a system and service manager that runs as PID 1 and starts
the rest of the system. It provides aggressive parallelization
capabilities, uses socket and D-Bus activation for starting services,
offers on-demand starting of daemons, keeps track of processes using
Linux control groups, maintains mount and automount points, and
implements an elaborate transactional dependency-based service control
logic. systemd supports SysV and LSB init scripts and works as a
replacement for sysvinit. Other parts of this package are a logging daemon,
utilities to control basic system configuration like the hostname,
date, locale, maintain a list of logged-in users, system accounts,
runtime directories and settings, and daemons to manage simple network
configuration, network time synchronization, log forwarding, and name
resolution.
This package was built from the 243.4-stable branch of systemd,
commit https://github.com/systemd/systemd-stable/commit/%{shortcommit}.
--------------------------------------------------------------------------------
Update Information:
- Latest bugfix release. Systemd-stable snapshots will now be numbered. - Fix
broken PrivateDevices filter on big-endian, s390x in particular (#1769148) -
systemd-modules-load.service should only warn, not fail, on error (#1254340) -
Fix incorrect certificate validation with DNS over TLS (#1771725, #1771726,
CVE-2018-21029) - Fix regression with crypttab keys with colons - Various
memleaks and minor memory access issues, warning adjustments No need to log out
or reboot.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Nov 19 2019 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 243.4
- Latest bugfix release. Systemd-stable snapshots will now be numbered.
- Fix broken PrivateDevices filter on big-endian, s390x in particular (#1769148)
- systemd-modules-load.service should only warn, not fail, on error (#1254340)
- Fix incorrect certificate validation with DNS over TLS (#1771725, #1771726,
CVE-2018-21029)
- Fix regression with crypttab keys with colons
- Various memleaks and minor memory access issues, warning adjustments
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1771725 - CVE-2018-21029 systemd: incorrect certificate validation results in
acceptance of any certificate signed by a trusted certificate authority for DNS over TLS
https://bugzilla.redhat.com/show_bug.cgi?id=1771725
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-4c3ce3aa5c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------