Multiple vulnerabilities have been discovered in systemd, the worst of which can lead to a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 252.4 | >= 252.4 |
A system and service manager.
Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-252.4"
Multiple vulnerabilities have been discovered in systemd, the worst of which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 251.3 | >= 251.3 |
| sys-apps/systemd-tmpfiles | * | <= 250 | — |
| sys-apps/systemd-utils | * | < 251.3 | >= 251.3 |
| sys-fs/udev | * | <= 250 | — |
A system and service manager.
Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-251.3"
All systemd-utils users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-utils-251.3"
Gentoo has discontinued support for sys-apps/systemd-tmpfiles, sys-boot/systemd-boot, and sys-fs/udev. See the 2022-04-19-systemd-utils news item. Users should unmerge it in favor of sys-apps/systemd-utils on non-systemd systems:
# emerge --ask --depclean --verbose "sys-apps/systemd-tmpfiles" "sys-boot/systemd-boot" "sys-fs/udev" # emerge --ask --verbose --oneshot ">=sys-apps/systemd-utils-251.3"
Multiple vulnerabilities have been found in systemd, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 248.5 | >= 248.5 |
A system and service manager.
Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-248.5"
A heap use-after-free flaw in systemd at worst might allow an attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 244.3 | >= 244.3 |
A system and service manager.
It was found that systemd incorrectly handled certain Polkit queries.
A local unprivileged user, by sending a specially crafted Polkit query, could possibly execute arbitrary code with the privileges of the process, escalate privileges or cause a Denial of Service condition.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-244.3"
Multiple vulnerabilities have been found in systemd, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 239-r4 | >= 239-r4 |
A system and service manager.
Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.
An attacker could cause a Denial of Service condition or possibly execute arbitrary code.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-239-r4"
Multiple vulnerabilities have been found in systemd, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 239-r2 | >= 239-r2 |
A system and service manager.
Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.
An attacker could possibly execute arbitrary code, cause a Denial of Service condition, or gain escalated privileges.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-239-r2"
Multiple vulnerabilities have been found in systemd, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/systemd | * | < 208 | >= 208 |
A system and service manager.
Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.
An attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or gain escalated privileges.
There is no known workaround at this time.
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-208"
A race condition in polkit could allow a local attacker to gain escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/libvirt | * | < 1.1.2-r3 | >= 1.1.2-r3 |
| net-misc/spice-gtk | * | < 0.21 | >= 0.21 |
| net-print/hplip | * | < 3.14.1 | >= 3.14.1 |
| sys-apps/systemd | * | < 204-r1 | >= 204-r1 |
| sys-auth/polkit | * | < 0.112 | >= 0.112 |
polkit is a toolkit for managing policies relating to unprivileged processes communicating with privileged processes.
polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed.
A local attacker could start a suid or pkexec process through a polkit-enabled application, which could result in privilege escalation or bypass of polkit restrictions.
There is no known workaround at this time.
All polkit users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-auth/polkit-0.112"
All HPLIP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/hplip-3.14.1"
All Spice-Gtk users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/spice-gtk-0.21"
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-204-r1"
All libvirt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/libvirt-1.1.2-r3"