-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 17 Feb 2019 09:22:58 +0100 Source: systemd Binary: systemd systemd-sysv systemd-container systemd-journal-remote systemd-coredump libpam-systemd libnss-myhostname libnss-mymachines libnss-resolve libnss-systemd libsystemd0 libsystemd-dev udev libudev1 libudev-dev udev-udeb libudev1-udeb Architecture: amd64 Version: 232-25+deb9u9 Distribution: stretch-security Urgency: high Maintainer: amd64 Build Daemon (binet) Changed-By: Salvatore Bonaccorso Description: libnss-myhostname - nss module providing fallback resolution for the current hostname libnss-mymachines - nss module to resolve hostnames for local container instances libnss-resolve - nss module to resolve names via systemd-resolved libnss-systemd - nss module providing dynamic user and group name resolution libpam-systemd - system and service manager - PAM module libsystemd-dev - systemd utility library - development files libsystemd0 - systemd utility library libudev-dev - libudev development files libudev1 - libudev shared library libudev1-udeb - libudev shared library (udeb) systemd - system and service manager systemd-container - systemd container/nspawn tools systemd-coredump - tools for storing and retrieving coredumps systemd-journal-remote - tools for sending and receiving remote journal logs systemd-sysv - system and service manager - SysV links udev - /dev/ and hotplug management daemon udev-udeb - /dev/ and hotplug management daemon (udeb) Changes: systemd (232-25+deb9u9) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit (CVE-2019-6454) * Allocate temporary strings to hold dbus paths on the heap (CVE-2019-6454) * sd-bus: if we receive an invalid dbus message, ignore and proceeed (CVE-2019-6454) Checksums-Sha1: 571000c5638283eb2171e3e54a5f9403689ace2a 87042 libnss-myhostname-dbgsym_232-25+deb9u9_amd64.deb 0926e07ad721deef603e80381d41159d8b050b62 105972 libnss-myhostname_232-25+deb9u9_amd64.deb 7e7edb6c85803f1c30906d9487c0a4d2493ffd3f 433796 libnss-mymachines-dbgsym_232-25+deb9u9_amd64.deb a80ad14cd710fae4317e2cfe2fa12716c259c32f 188056 libnss-mymachines_232-25+deb9u9_amd64.deb 9c485ca65d7a4a191ad60174ef90d3997809571c 428934 libnss-resolve-dbgsym_232-25+deb9u9_amd64.deb a13ca745271dbdf65b1fe28f43908ffa510c9e85 187444 libnss-resolve_232-25+deb9u9_amd64.deb 08dc7d3b43082ec65f61a58bb19c3f91ed78e040 432562 libnss-systemd-dbgsym_232-25+deb9u9_amd64.deb 1898ea4e1cd0119177c8c08c16058d6d0038aa7b 185770 libnss-systemd_232-25+deb9u9_amd64.deb 4b99c6f1f8ee1e1b282023476392b4c8eb317bb9 422218 libpam-systemd-dbgsym_232-25+deb9u9_amd64.deb 5d2575d29770a21d26c0782274787e54d6bdb624 188244 libpam-systemd_232-25+deb9u9_amd64.deb c0c47e3f2ac0e5d39b76599f124205b66642eb8f 10304868 libsystemd-dev-dbgsym_232-25+deb9u9_amd64.deb e67aeedc15cf13563ef2e4a4fd32f3beda46e853 1973764 libsystemd-dev_232-25+deb9u9_amd64.deb bde0df491a12e3e4a4ffe1af7cd1168f91489966 662784 libsystemd0-dbgsym_232-25+deb9u9_amd64.deb bb72c17790ad506e8c4d653865a2d82fee091d0c 280576 libsystemd0_232-25+deb9u9_amd64.deb 7355126ba587e9ddd484bda7292f44c2ccc61a39 91926 libudev-dev_232-25+deb9u9_amd64.deb f4bfb27c2fffeab5770d0f720f444d994ecbc29d 157458 libudev1-dbgsym_232-25+deb9u9_amd64.deb 34af66678bdbc3ecdc8f7e2f1db8e2f29c5475c1 48630 libudev1-udeb_232-25+deb9u9_amd64.udeb 0afd278323ab79e6b5bfbd87a716c2b48404e728 125620 libudev1_232-25+deb9u9_amd64.deb 26a281a263132a5c54630433d2aa8d03e33cf8ec 486686 systemd-container-dbgsym_232-25+deb9u9_amd64.deb 4f1db94405d4972107d60d80cf00a0d2b9714c57 289910 systemd-container_232-25+deb9u9_amd64.deb be2deba1c35a388ee02bd707f2ff907d5abe7861 65026 systemd-coredump-dbgsym_232-25+deb9u9_amd64.deb 6aed0a4d491df8d456df09310a099e9fdd85e7d2 109716 systemd-coredump_232-25+deb9u9_amd64.deb 9d9e256afdfbb551e0f6893f129275e2c4bf7b73 6001696 systemd-dbgsym_232-25+deb9u9_amd64.deb 281c2c2060f7b489987ab13996e9fcdcff511d9a 110760 systemd-journal-remote-dbgsym_232-25+deb9u9_amd64.deb cf97e93f10908446a478f45e24f6d7c4cdeb1ad1 130128 systemd-journal-remote_232-25+deb9u9_amd64.deb 6965203fe79cff5749d43fc7ad1957e2a62922f2 81984 systemd-sysv_232-25+deb9u9_amd64.deb 571e7a67aee92d3e79e327da26f43e6704892147 18390 systemd_232-25+deb9u9_amd64.buildinfo bec4424bb15951c72f6cae6f6f6919945cde6f34 2468326 systemd_232-25+deb9u9_amd64.deb 26ebf10bb8ca6f379228a61268ddc47527bbb0f0 1332088 udev-dbgsym_232-25+deb9u9_amd64.deb 28f74c570dc867fa45653316166361b8cdced5c8 277624 udev-udeb_232-25+deb9u9_amd64.udeb 2aa5b6e642524d8edd4bee6966ab4b563320175a 1113766 udev_232-25+deb9u9_amd64.deb Checksums-Sha256: 8f6cfa11677894ee519a1dacb15b9e41e41124471688f8c70d1e7e87f2ba2db9 87042 libnss-myhostname-dbgsym_232-25+deb9u9_amd64.deb d5619305243f1bdf8a92d438b468bb39058c7f604514e2dac9aa1a022f05b557 105972 libnss-myhostname_232-25+deb9u9_amd64.deb df18091564484347afbb42d27e03fe57f66a9ff168211cb769f1e911ca3400af 433796 libnss-mymachines-dbgsym_232-25+deb9u9_amd64.deb 51f727183c5a762fb432d3690b2e257da90583a6a508e28193fcbee0f9b2b1e6 188056 libnss-mymachines_232-25+deb9u9_amd64.deb 5d0fb1cfe887e871f5a118007dadb9859410e3c8d5461606b109bc7b6c62db75 428934 libnss-resolve-dbgsym_232-25+deb9u9_amd64.deb 1d30af41e1248ea81b93405b6b57630fbf7ab1efe5bf5733414c0cdfc7e469a9 187444 libnss-resolve_232-25+deb9u9_amd64.deb d330268d1bb64e46dd690c97c4ce9b5c0e70d933e5e49909cb8d93bad645b5ac 432562 libnss-systemd-dbgsym_232-25+deb9u9_amd64.deb b4ec8f0fe583a4c27a74c5aab3f67323f587d23f7107272bef6c1f9f6371d7d1 185770 libnss-systemd_232-25+deb9u9_amd64.deb e0618b9223b7e7068efd948694ed7ee1afba76a8e5e07bf7bfc292a49f073b2a 422218 libpam-systemd-dbgsym_232-25+deb9u9_amd64.deb bca69521bf725deed68721c60b178f5bd68a37d80d18bbd5293a1be959ff7288 188244 libpam-systemd_232-25+deb9u9_amd64.deb fca1833bd92f50af743a73dfcad3e89198bc3cd2feabb5af1a158fa8406793ae 10304868 libsystemd-dev-dbgsym_232-25+deb9u9_amd64.deb 3eb417025409c416cf01223f9f17f500ccfc748aca0c470036fadee705f95494 1973764 libsystemd-dev_232-25+deb9u9_amd64.deb ad173bfb24f1e7a24cd2742363a814ef8c34d283053e234888dafa513b13cb0d 662784 libsystemd0-dbgsym_232-25+deb9u9_amd64.deb 6188171cfaf98c0ef0077ab215d0c508cec332cff64d5cd0e14b705d126e9f26 280576 libsystemd0_232-25+deb9u9_amd64.deb 32e2577e05c92d3442d4f1ab946e2452ee1de1ca80f264dcefeec1a91ddad8d7 91926 libudev-dev_232-25+deb9u9_amd64.deb a342fd86269caddc73c199b658690016aa67c750f0c4e30ca0ff27122dbf2c60 157458 libudev1-dbgsym_232-25+deb9u9_amd64.deb df2d3266495ecca34959fddb436e560fa207fc075eb21c782c73111ddfe001ed 48630 libudev1-udeb_232-25+deb9u9_amd64.udeb 7800aded4caf7940d0808fc9d9636c24f65fbf7011b07090b5d4c19f14199022 125620 libudev1_232-25+deb9u9_amd64.deb f22951a75767cc6e1cbfdd11c383b8d2bfa9553b9e35b8218b25117a241d56c3 486686 systemd-container-dbgsym_232-25+deb9u9_amd64.deb f222c37d2e16e9a8903b0f0d500ea5b5dbca45f42525a48bbf05d62f31ecba24 289910 systemd-container_232-25+deb9u9_amd64.deb a31d044251fae000a9323080bda74d2c02668344af312017363acc92c82cb494 65026 systemd-coredump-dbgsym_232-25+deb9u9_amd64.deb f045afa4099f0c81045253324767fe8936c2c526b852fedce27e380d39de629b 109716 systemd-coredump_232-25+deb9u9_amd64.deb b6f2123e1e23c637c0321d36de47149a964df434216c2a950efc84ee3ff73cb7 6001696 systemd-dbgsym_232-25+deb9u9_amd64.deb 9bfcd37719b28b5e0c2e7ebb4e427034a881098db404f36f4550c029b7174a57 110760 systemd-journal-remote-dbgsym_232-25+deb9u9_amd64.deb 92c33cefa135523d91387a02688e5b80e5fa32bbdfb82cfcf8064d6a16647947 130128 systemd-journal-remote_232-25+deb9u9_amd64.deb 5f3f094d19d976ac491cbd9e1f8444761eb1472d77b8fc30329cce36436ce492 81984 systemd-sysv_232-25+deb9u9_amd64.deb f49d1cdb13be2252063bd2945e4808b1199c3d2a646486477a348068d21d5284 18390 systemd_232-25+deb9u9_amd64.buildinfo a174462ba83fd6d6663190a97d7b91df8f282b1b008c729223f467cf339e6b92 2468326 systemd_232-25+deb9u9_amd64.deb be985c3a0a6c24cda29ebf567363ebd3e7caf84d14ca987ec4cce3c806926ba7 1332088 udev-dbgsym_232-25+deb9u9_amd64.deb 2e09636f71f563ba9ecdb7752ab2e074191a521fe68a5ae9479a6779077015a4 277624 udev-udeb_232-25+deb9u9_amd64.udeb 20ccec622c608fe2410c9fc836510e98cd102bb8d06e9ede5a2216fb3894a4f2 1113766 udev_232-25+deb9u9_amd64.deb Files: 6ba1908ade3e83fbea3f6e47cc3c2632 87042 debug extra libnss-myhostname-dbgsym_232-25+deb9u9_amd64.deb b687bd3eecc5550b170378472cf0ea54 105972 admin extra libnss-myhostname_232-25+deb9u9_amd64.deb 06a4ec3f2b1d7b905328bb6d409862b7 433796 debug extra libnss-mymachines-dbgsym_232-25+deb9u9_amd64.deb f37cc69ca38f6f0882a412cd224af88b 188056 admin extra libnss-mymachines_232-25+deb9u9_amd64.deb 07a59b20a20cf87a3861f53fd92bbb6a 428934 debug extra libnss-resolve-dbgsym_232-25+deb9u9_amd64.deb 9c5f46c79d894f1f87d5e9a8598fe84f 187444 admin extra libnss-resolve_232-25+deb9u9_amd64.deb c78a58a3e6f835a5be50059ced257597 432562 debug extra libnss-systemd-dbgsym_232-25+deb9u9_amd64.deb a6ba51b7e5301cd5f24dbbbca123810f 185770 admin extra libnss-systemd_232-25+deb9u9_amd64.deb 51bcd9e068b4e36ae390b809f5a4b5cd 422218 debug extra libpam-systemd-dbgsym_232-25+deb9u9_amd64.deb f96bfc5a358e2ea292b0c28c4b3beb3a 188244 admin standard libpam-systemd_232-25+deb9u9_amd64.deb 314d00327a24d4e123579e64e8e161d3 10304868 debug extra libsystemd-dev-dbgsym_232-25+deb9u9_amd64.deb aa6d8b2a067d065f6c7957f7f772a76a 1973764 libdevel optional libsystemd-dev_232-25+deb9u9_amd64.deb 1c94ffecb6ffe75c9fdc9d1304ff45df 662784 debug extra libsystemd0-dbgsym_232-25+deb9u9_amd64.deb 28422f6a6bae0cbf8a2c9a3cc74e93d8 280576 libs optional libsystemd0_232-25+deb9u9_amd64.deb ac1b92e7f25cff63fb7f2ec28919991a 91926 libdevel optional libudev-dev_232-25+deb9u9_amd64.deb 3e6dcacf998c1bad427cb775f2e9f66a 157458 debug extra libudev1-dbgsym_232-25+deb9u9_amd64.deb 7d22dc4ccd7088693983d7f59dc1bbad 48630 debian-installer optional libudev1-udeb_232-25+deb9u9_amd64.udeb 8f7717f6a928793239509f2d7b39c537 125620 libs important libudev1_232-25+deb9u9_amd64.deb d18b8ac1c0a2920799385e3eb61abae2 486686 debug extra systemd-container-dbgsym_232-25+deb9u9_amd64.deb a2010aaabdc006b53f50a81ee9f16aa8 289910 admin optional systemd-container_232-25+deb9u9_amd64.deb 4424b23d26cf6725cc5006e1124ca539 65026 debug extra systemd-coredump-dbgsym_232-25+deb9u9_amd64.deb cb2c6bb2c4fda314fe7087dce48ef312 109716 admin optional systemd-coredump_232-25+deb9u9_amd64.deb 5de80499a99e53b3e234f50c596cd7a2 6001696 debug extra systemd-dbgsym_232-25+deb9u9_amd64.deb 4272d8bb1114837200ddc778360989f5 110760 debug extra systemd-journal-remote-dbgsym_232-25+deb9u9_amd64.deb fc598dcbd76ab3bc47f8dc5d1cba6a41 130128 admin optional systemd-journal-remote_232-25+deb9u9_amd64.deb 2aaa362a43212605511d27fe43bd7edb 81984 admin important systemd-sysv_232-25+deb9u9_amd64.deb c3dffae6aa2b0a19ab5298def0755d13 18390 admin optional systemd_232-25+deb9u9_amd64.buildinfo 7ee862f8558705c51f0c765b53422d90 2468326 admin important systemd_232-25+deb9u9_amd64.deb ecdcf7d6571f4bdf0de995812f1e3ff2 1332088 debug extra udev-dbgsym_232-25+deb9u9_amd64.deb bc8ab7d1861f9241d3fd1a1d819a6c83 277624 debian-installer optional udev-udeb_232-25+deb9u9_amd64.udeb b9e43f4235f8d3e489f91c70a20f0591 1113766 admin important udev_232-25+deb9u9_amd64.deb Package-Type: udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfMyamUr87b0FNS6cx5B9JhgL/UEFAlxp2SQACgkQx5B9JhgL /UFxIw//cKkqretk+smsguBnLJwM1jyxORF+WwifK7+qOY3+goaskhDxzDj9dL5a T3XhwJKBR82OwBDAUPIWBEbfNBpSzgEli75/Z+zMi78/T6nnPfn7kKwdnaSioQut 5q1ogAu168AoLCOI2aGqEp69/GoXd5OfsbKdvWj8+0+6Tjr/jvMfA67cs/3EsG5q fUumR09FhfHoX9fOXIDzZco0MR0l13tcnB9mlSeojiP4BkaVNx7MOTpBSCpZi94w YHDDZUIy+sshS2sity8qM+seld06M+S/GicakwIZeuLwaBRrsrkBOc7ALMkufWh2 3tvVdvPc0QtC+hU0tRTcq9ANHMexqkfaa34h4No56PuPXKb4zcuo9qVXjUquWRc1 l4gb5mJJm7hC9kF489Ub85OO80fgtoai+nnBn2i08wr6hJq7YTKmv3WSh3+azjLA QNiRLZZv8vIry4cP0VAvcoThEJj8MTKbY9Pzsq/p6chNVpU8KGNBBfE09RZr0qNr tCVrZ5SjAYFAFzAwtxAMMQEdZn+52J4pm1H/CncyVw2d3CDD/XllwC3Qr99RGLnW 238p/TcsHjbt1Igjh7GKoSQVpmMom5tmE5mg/nXoQoMIAN84H4X8V1BOUSYV93o6 ss4vtRYqLaO2/oVbn6kw5T08veFGB4Bk9rONA1dv2CIkrOkzzsU= =RBv/ -----END PGP SIGNATURE-----