RHBA-2018:0711 - Bug Fix Advisory

Topic

An update for systemd is now available for Red Hat Enterprise Linux 7.

Description

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

Users of systemd are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 1302305 - systemctl is not updating cgroup resource in /sys/fs/cgroup/ value after set property to -1
• BZ - 1312002 - hangs on reboot or shutdown when nfs file system mounted
• BZ - 1359939 - Restarting systemd-journald to load new configurations causes other daemons stop working
• BZ - 1384014 - RFE: Possibility to boot from encrypted non-iSCSI disks and mount encrypted iSCSI disks on the same machine
• BZ - 1417387 - Backport -a to systemd-nspawn
• BZ - 1420505 - Using "systemd.log_level=debug systemd.log_target=kmsg" causes systemd to send "Executing: ..." message to remote clients.
• BZ - 1431687 - journal: Cannot read journal written by Fedora 24 and later
• BZ - 1437114 - systemd stops servicing with "Freezing execution" message upon memory exhaustion
• BZ - 1444824 - Disabling ipv6 on RHEL7.3 still fetches ipv6 entry for getent `uname -n` command
• BZ - 1445732 - systemd-tmpfiles --create tries to adjust directory permissions and owner when 'e' directive is used
• BZ - 1465759 - journalctl stops working as soon as it encounters an empty journal file
• BZ - 1471230 - [backport request] Multiple ExecStarts do no work properly
• BZ - 1472439 - docker + overlay2 + systemd: /etc/machine-id is not on a temporary file system
• BZ - 1475870 - [Tests] Fix test-functions that generate root image for TEST-* tests
• BZ - 1476910 - /usr/lib/udev/scsi_id -s switch doesn't work
• BZ - 1477757 - [RFE] allow cryptsetup block device units to appear after networking comes up
• BZ - 1493047 - ProtectSystem protects /home instead of /usr
• BZ - 1493976 - CPUAffinity does not accept ranges
• BZ - 1494610 - [RHEL-7.5] systemd: rdma ListenNetlink support needed
• BZ - 1497639 - [TESTS] test-socket-util fails on machines with disabled IPv6
• BZ - 1498318 - du/df hang indefinitely (RHEL Atomic Host 7.4)
• BZ - 1500119 - Sync evdev hwdb with upstream for the libinput re-base
• BZ - 1501017 - unprivileged user can freeze journald
• BZ - 1503942 - timedatectl crashes if the length of the day name in the current locale is long
• BZ - 1511565 - journald: never block when sending messages on NOTIFY_SOCKET socket
• BZ - 1516283 - Netdev names for nfp driver inconsistent
• BZ - 1532586 - _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS
• BZ - 1540538 - sd_journal can "leak" fds if it starts dropping inotify events
• BZ - 1540941 - systemd doesn't reap zombies after it crashes
• BZ - 1541061 - systemd should provide clear indication in the system log that connection to system bus failed
• BZ - 1542391 - calling service reload after starting firewalld stop NM daemon
• BZ - 1545676 - systemd segfaults running test case https://github.com/systemd/systemd-fedora-ci/tree/master/issue-1981

CVEs

(none)

References

• https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html