From cda068c40d0f94529f59e0cca773ff9c47ca999a Mon Sep 17 00:00:00 2001 From: Zbigniew Jędrzejewski-Szmek Date: Feb 20 2019 16:32:50 +0000 Subject: Patches for CVE-2019-6454 --- diff --git a/sources b/sources index 18bbdec..63b373a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (systemd-241.tar.gz) = a7757574590e8aa37e1291ea0b2c5eb03a8d8062fe9462fa5b0bf50830c933e2b301d106c70d904f94afc0aa8e43a8acfd11926dfa25b1b89174580e491e545e +SHA512 (systemd-a09c170.tar.gz) = e63057a0c951dea20e4fabe3485952823b38e80c62fa94f4a5e7b53d08e5995539bbbfbff72eaf033685dfc80f27a029c81912584aae10a5b3e6c24b64c51d25 diff --git a/systemd.spec b/systemd.spec index 7f300bd..bfbc580 100644 --- a/systemd.spec +++ b/systemd.spec @@ -1,7 +1,7 @@ -#global commit f02b5472c6f0c41e5dc8dc2c84590866baf937ff +%global commit a09c170122cf3b37c3e4431bf082f9dbdc07fc70 %{?commit:%global shortcommit %(c=%{commit}; echo ${c:0:7})} -#global stable 1 +%global stable 1 # We ship a .pc file but don't want to have a dep on pkg-config. We # strip the automatically generated dep here and instead co-own the @@ -15,7 +15,7 @@ Name: systemd Url: https://www.freedesktop.org/wiki/Software/systemd Version: 241 -Release: 1%{?commit:.git%{shortcommit}}%{?dist} +Release: 2%{?commit:.git%{shortcommit}}%{?dist} # For a breakdown of the licensing, see README License: LGPLv2+ and MIT and GPLv2+ Summary: System and Service Manager @@ -695,6 +695,10 @@ fi %files tests -f .file-list-tests %changelog +* Wed Feb 20 2019 Zbigniew Jędrzejewski-Szmek - 241-2.gita09c170 +- Prevent buffer overread in systemd-udevd +- Properly validate dbus paths received over dbus (#1678394, CVE-2019-6454) + * Sat Feb 9 2019 Zbigniew Jędrzejewski-Szmek - 241~rc2-2 - Turn LTO back on