]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
systemd: Fix CVE-2023-26604
authorrajmohan r <rajmohan.r@kpit.com>
Wed, 19 Apr 2023 10:34:55 +0000 (16:04 +0530)
committerSteve Sakoman <steve@sakoman.com>
Wed, 19 Apr 2023 14:13:35 +0000 (04:13 -1000)
commit7880eb801dcee44a9e8920d249057492d1de6b12
treeb5997be16595a8749465d609f5db929641dda880
parent70135bf04eb7173434a7240ddf11639d13aab003
systemd: Fix CVE-2023-26604

Below patch files to fix CVE-2023-26604
CVE-2023-26604-1.patch, CVE-2023-26604-2.patch and
CVE-2023-26604-3.patch and CVE-2023-26604-4.patch

make pager secure when under euid is changed or explicitly
requested

Reference:
CVE-2023-26604-1.patch:
https://github.com/systemd/systemd/pull/17270/commits/612ebf6c913dd0e4197c44909cb3157f5c51a2f0
CVE-2023-26604-2.patch:
https://github.com/systemd/systemd/pull/17270/commits/1b5b507cd2d1d7a2b053151abb548475ad9c5c3b
CVE-2023-26604-3.patch:
https://github.com/systemd/systemd/pull/17270/commits/0a42426d797406b4b01a0d9c13bb759c2629d108
CVE-2023-26604-4.patch:
https://github.com/systemd/systemd/pull/17359/commits/b8f736b30e20a2b44e7c34bb4e43b0d97ae77e3c

Signed-off-by: rajmohan r <rajmohan.r@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-core/systemd/systemd/CVE-2023-26604-1.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd/CVE-2023-26604-2.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd/CVE-2023-26604-3.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd/CVE-2023-26604-4.patch [new file with mode: 0644]
meta/recipes-core/systemd/systemd_244.5.bb