Browse code
systemd - Fix CVE-2018-15688
Change-Id: Id6b484aeeeee25ca94e3a119e42c45a857dede58
Reviewed-on: http://photon-jenkins.eng.vmware.com:8082/6084
Reviewed-by: Anish Swaminathan <anishs@vmware.com>
Tested-by: Anish Swaminathan <anishs@vmware.com>
Tapas Kundu authored on 2018/11/02 22:53:21Showing 2 changed files
| 1 | 1 |
new file mode 100644 |
| ... | ... |
@@ -0,0 +1,11 @@ |
| 0 |
+--- a/src/libsystemd-network/dhcp6-option.c 2018-11-02 19:08:04.002213321 +0530 |
|
| 1 |
+@@ -101,7 +101,7 @@ int dhcp6_option_append_ia(uint8_t **buf |
|
| 2 |
+ return -EINVAL; |
|
| 3 |
+ } |
|
| 4 |
+ |
|
| 5 |
+- if (*buflen < len) |
|
| 6 |
++ if (*buflen < offsetof(DHCP6Option, data) + len) |
|
| 7 |
+ return -ENOBUFS; |
|
| 8 |
+ |
|
| 9 |
+ ia_hdr = *buf; |
| ... | ... |
@@ -1,7 +1,7 @@ |
| 1 | 1 |
Summary: Systemd-233 |
| 2 | 2 |
Name: systemd |
| 3 | 3 |
Version: 233 |
| 4 |
-Release: 15%{?dist}
|
|
| 4 |
+Release: 16%{?dist}
|
|
| 5 | 5 |
License: LGPLv2+ and GPLv2+ and MIT |
| 6 | 6 |
URL: http://www.freedesktop.org/wiki/Software/systemd/ |
| 7 | 7 |
Group: System Environment/Security |
| ... | ... |
@@ -32,6 +32,7 @@ Patch13: systemd-228-CVE-2017-15908-dns-pkt-loop-fix.patch |
| 32 | 32 |
Patch14: systemd-233-CVE-2017-18078.patch |
| 33 | 33 |
Patch15: systemd-233-util-linux-build-failure.patch |
| 34 | 34 |
Patch16: systemd-233-CVE-2018-1049.patch |
| 35 |
+Patch17: systemd-233-CVE-2018-15688.patch |
|
| 35 | 36 |
|
| 36 | 37 |
Requires: Linux-PAM |
| 37 | 38 |
Requires: libcap |
| ... | ... |
@@ -102,6 +103,7 @@ sed -i "/xlocale.h/d" src/basic/parse-util.c |
| 102 | 102 |
%patch14 -p1 |
| 103 | 103 |
%patch15 -p1 |
| 104 | 104 |
%patch16 -p1 |
| 105 |
+%patch17 -p1 |
|
| 105 | 106 |
|
| 106 | 107 |
sed -i "s#\#DefaultTasksMax=512#DefaultTasksMax=infinity#g" src/core/system.conf |
| 107 | 108 |
|
| ... | ... |
@@ -252,6 +254,8 @@ rm -rf %{buildroot}/*
|
| 252 | 252 |
%files lang -f %{name}.lang
|
| 253 | 253 |
|
| 254 | 254 |
%changelog |
| 255 |
+* Fri Nov 02 2018 Tapas Kundu <tkundu@vmware.com> 233-16 |
|
| 256 |
+- Fix CVE-2018-15688 |
|
| 255 | 257 |
* Mon Jul 23 2018 Ankit Jain <ankitja@vmware.com> 233-15 |
| 256 | 258 |
- Fix CVE-2018-1049. |
| 257 | 259 |
* Wed Jun 27 2018 Srivatsa S. Bhat <srivatsa@csail.mit.edu> 233-14 |