• Fix hang in flush_accept (#1702358)
  • Fix handling of RUN keys in udevd
  • Some documentation and minor logging fixes
  • Backport the addition of RestrictSUIDSGID= from systemd-242 and enable RestrictSUIDSGID=yes for systemd services which use DynamicUser=yes (#1703356, CVE-2019-3843). The defaults in v242 were changed to enable RestrictSUIDSGID=yes if DynamicUser=yes is specified, but this backport doesn't do this and RestrictSUIDSGID=yes has to be requested explicitly. Maintainers of other services packages for Fedora should consider doing this.

No need to log out or reboot.

How to install

sudo dnf upgrade --advisory=FEDORA-2019-7322053e74

This update has been submitted for testing by zbyszek.

a year ago
User Icon imabug provided feedback a year ago
karma
Test Case Services start

This update has been pushed to testing.

a year ago
User Icon bojan commented & provided feedback a year ago
karma

Works here.

User Icon nomos commented & provided feedback a year ago
karma

Tested on virtual machine with AMD Ryzen 5 2400G, system still boots and works, but:

Test Case Services start failed - mcelog.service loaded failed failed Machine Check Exception Logging Daemon

Test Case Services start

This update has been submitted for batched by bodhi.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
BZ#1702358 Booting ends in shutdown
0
0
BZ#1703356 CVE-2019-3843 systemd: services with DynamicUser can create SUID/SGID binaries [fedora-all]
0
0

Automated Test Results

Test Cases

-1 1 Test Case Services start
0 0 Test Case base service manipulation
0 1 Test Case base services start
0 0 Test Case base shutdown/reboot
0 0 Test Case User:Tablepc/Draft testcase reboot