摘要:
systemd security update
安全等级: Medium
公告ID: KylinSec-SA-2024-1048
发布日期: 2024年1月5日
关联CVE: CVE-2023-7008
systemd is a system and service manager that runs as PID 1 and starts the rest of the system.
Security Fix(es):
A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.(CVE-2023-7008)
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2023-7008 | KY3.4-5A | systemd | Unaffected |
| CVE-2023-7008 | KY3.4-5A | systemd | Fixed |
| CVE-2023-7008 | KY3.5.1 | systemd | Fixed |
| CVE-2023-7008 | KY3.5.2 | systemd | Fixed |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| systemd-help | noarch | 249-64.kb2.ky3_5 |
| systemd-timesyncd | x86_64 | 249-64.kb2.ky3_5 |
| systemd | x86_64 | 249-64.kb2.ky3_5 |
| systemd-udev | x86_64 | 249-64.kb2.ky3_5 |
| systemd-networkd | x86_64 | 249-64.kb2.ky3_5 |
| systemd-pam | x86_64 | 249-64.kb2.ky3_5 |
| systemd-resolved | x86_64 | 249-64.kb2.ky3_5 |
| systemd-nspawn | x86_64 | 249-64.kb2.ky3_5 |
| systemd-libs | x86_64 | 249-64.kb2.ky3_5 |
| systemd-container | x86_64 | 249-64.kb2.ky3_5 |
| systemd-devel | x86_64 | 249-64.kb2.ky3_5 |
| systemd-udev | aarch64 | 249-64.kb2.ky3_5 |
| systemd-container | aarch64 | 249-64.kb2.ky3_5 |
| systemd-resolved | aarch64 | 249-64.kb2.ky3_5 |
| systemd | aarch64 | 249-64.kb2.ky3_5 |
| systemd-devel | aarch64 | 249-64.kb2.ky3_5 |
| systemd-networkd | aarch64 | 249-64.kb2.ky3_5 |
| systemd-libs | aarch64 | 249-64.kb2.ky3_5 |
| systemd-timesyncd | aarch64 | 249-64.kb2.ky3_5 |
| systemd-pam | aarch64 | 249-64.kb2.ky3_5 |
| systemd-nspawn | aarch64 | 249-64.kb2.ky3_5 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| systemd-help | noarch | 243-74.kb2.ky3_4 |
| systemd-udev | x86_64 | 243-74.kb2.ky3_4 |
| systemd-devel | x86_64 | 243-74.kb2.ky3_4 |
| systemd-libs | x86_64 | 243-74.kb2.ky3_4 |
| systemd | x86_64 | 243-74.kb2.ky3_4 |
| systemd-container | x86_64 | 243-74.kb2.ky3_4 |
| systemd-journal-remote | x86_64 | 243-74.kb2.ky3_4 |
| systemd-udev-compat | x86_64 | 243-74.kb2.ky3_4 |
| systemd-devel | aarch64 | 243-74.kb2.ky3_4 |
| systemd-journal-remote | aarch64 | 243-74.kb2.ky3_4 |
| systemd-udev-compat | aarch64 | 243-74.kb2.ky3_4 |
| systemd-udev | aarch64 | 243-74.kb2.ky3_4 |
| systemd | aarch64 | 243-74.kb2.ky3_4 |
| systemd-libs | aarch64 | 243-74.kb2.ky3_4 |
| systemd-container | aarch64 | 243-74.kb2.ky3_4 |
| 软件名称 | 架构 | 版本号 |
|---|---|---|
| systemd-help | noarch | 249-75.ky3_5.kb1 |
| systemd-nspawn | x86_64 | 249-75.ky3_5.kb1 |
| systemd-pam | x86_64 | 249-75.ky3_5.kb1 |
| systemd-container | x86_64 | 249-75.ky3_5.kb1 |
| systemd | x86_64 | 249-75.ky3_5.kb1 |
| systemd-devel | x86_64 | 249-75.ky3_5.kb1 |
| systemd-libs | x86_64 | 249-75.ky3_5.kb1 |
| systemd-udev | x86_64 | 249-75.ky3_5.kb1 |
| systemd-resolved | x86_64 | 249-75.ky3_5.kb1 |
| systemd-networkd | x86_64 | 249-75.ky3_5.kb1 |
| systemd-timesyncd | x86_64 | 249-75.ky3_5.kb1 |
| systemd-pam | aarch64 | 249-75.ky3_5.kb1 |
| systemd-networkd | aarch64 | 249-75.ky3_5.kb1 |
| systemd-nspawn | aarch64 | 249-75.ky3_5.kb1 |
| systemd-resolved | aarch64 | 249-75.ky3_5.kb1 |
| systemd-udev | aarch64 | 249-75.ky3_5.kb1 |
| systemd-container | aarch64 | 249-75.ky3_5.kb1 |
| systemd-timesyncd | aarch64 | 249-75.ky3_5.kb1 |
| systemd-libs | aarch64 | 249-75.ky3_5.kb1 |
| systemd-devel | aarch64 | 249-75.ky3_5.kb1 |
| systemd | aarch64 | 249-75.ky3_5.kb1 |
方法一：下载安装包进行升级安装
1、通过下载链接下载需要升级的升级包保存，如 xxx.rpm
2、通过rpm命令升级，如 rpm -Uvh xxx.rpm
方法二：通过软件源进行升级安装
1、保持能够连接上互联网
2、通过yum命令升级指定的包，如 yum install 包名
