Red Hat Product Errata RHSA-2024:7705 - Security Advisory
Issued:
2024-10-07
Updated:
2025-01-09

RHSA-2024:7705 - Security Advisory

Synopsis

Moderate: systemd security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for systemd is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

  • systemd: privilege escalation via the less pager (CVE-2023-26604)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 2175611 - CVE-2023-26604 systemd: privilege escalation via the less pager
  • RHEL-17394 - System drops to emergency when restarting a mount

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
systemd-219-78.el7_9.11.src.rpm SHA-256: b479d6f5b4e6ff0470bbbdcf821aa511dada38f4a3efe576d88fe146d7dfd08a
x86_64
libgudev1-219-78.el7_9.11.i686.rpm SHA-256: 17ccedb5e5124b9e6a484c38fd68f74e3ac881cc6b4cf0def056e26640313a01
libgudev1-219-78.el7_9.11.x86_64.rpm SHA-256: 5b560b09448df62039770fdee957b59957e034605c82e24b80bba9e7a35846f4
libgudev1-devel-219-78.el7_9.11.i686.rpm SHA-256: 802b3be0175e4eaa345dd2ff40bd48599c0b0fe9cdf2355d62202c00d2ddc047
libgudev1-devel-219-78.el7_9.11.x86_64.rpm SHA-256: 657fc3539fc1969a7514caf33f7454a7d666615a1813388fa4d38804f0c8a565
systemd-219-78.el7_9.11.x86_64.rpm SHA-256: 4dd6e198f00e57416e21e75ec0698129a7095d4b2161e62505dd3a3b3af28e05
systemd-debuginfo-219-78.el7_9.11.i686.rpm SHA-256: cccd3b6d86348cfa5e8cbce7ef5f0ac36a2674336f83a2b81b7da62bae39b363
systemd-debuginfo-219-78.el7_9.11.i686.rpm SHA-256: cccd3b6d86348cfa5e8cbce7ef5f0ac36a2674336f83a2b81b7da62bae39b363
systemd-debuginfo-219-78.el7_9.11.x86_64.rpm SHA-256: d2e6b124cc5e9a2cefbb05b734884ec49d48538b36cd5f05bfe4806cf478e2a4
systemd-debuginfo-219-78.el7_9.11.x86_64.rpm SHA-256: d2e6b124cc5e9a2cefbb05b734884ec49d48538b36cd5f05bfe4806cf478e2a4
systemd-devel-219-78.el7_9.11.i686.rpm SHA-256: 02e6741d164f0b0626380e5cf3187c88057914ebd9c7220a4c65b90dc3f7f524
systemd-devel-219-78.el7_9.11.x86_64.rpm SHA-256: 666641b53427083600fa4e7db3e96da2a2298210a16963eeb9ea77aef0442cdf
systemd-journal-gateway-219-78.el7_9.11.x86_64.rpm SHA-256: ff50ea2bf81c1135c2c244e43fadfbe8e3214b8a993fbf7ee7c111e49de35faa
systemd-libs-219-78.el7_9.11.i686.rpm SHA-256: 2286c032d830abb2fb9c0f1cd09f9ddb4f4f405400a7bda9b11fdf9f00fcdd37
systemd-libs-219-78.el7_9.11.x86_64.rpm SHA-256: 681e61a88bb6d08e617aa303e9b9c5bf8a0addff075790b73a997b41f387debf
systemd-networkd-219-78.el7_9.11.x86_64.rpm SHA-256: 0d6d047d33c9478eeffb06690195cba661b44e16d506efb1ca125f616ccc1a90
systemd-python-219-78.el7_9.11.x86_64.rpm SHA-256: d5ae1af746dec2d09ffe775691421cb5d1951a503a5dbd8b74eef6cdf344b5b4
systemd-resolved-219-78.el7_9.11.i686.rpm SHA-256: b62e2cff3f3d8b2b09ca029ae3f2842ef89adfe5af6b839163793a5f41900386
systemd-resolved-219-78.el7_9.11.x86_64.rpm SHA-256: cedde51946bc0d3da6e10c3483151534a56482436f8081f2e60c4ae10842dd40
systemd-sysv-219-78.el7_9.11.x86_64.rpm SHA-256: 0b29db96f5c23635347de41950caeeb694010a1b711aa85beb4493962c5dec23

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
systemd-219-78.el7_9.11.src.rpm SHA-256: b479d6f5b4e6ff0470bbbdcf821aa511dada38f4a3efe576d88fe146d7dfd08a
s390x
libgudev1-219-78.el7_9.11.s390.rpm SHA-256: 189dd00e242edd29c7d08e30d94dbeeecf11cb54bdaa78a101cdbf3f4269a186
libgudev1-219-78.el7_9.11.s390x.rpm SHA-256: d74321054013a6df3f7f62588be844c74d30badcc31c6a6a69354a3e5c981707
libgudev1-devel-219-78.el7_9.11.s390.rpm SHA-256: e3def5487705c7fd98f861b5c7fadaa4af006c85d8ca8c1b19e5d9dedf45f41a
libgudev1-devel-219-78.el7_9.11.s390x.rpm SHA-256: af323eec3420c00de614089508cc81ba9d4ff995180ac8a27e8afeddb10ca168
systemd-219-78.el7_9.11.s390x.rpm SHA-256: 63feb5af8b0b4cd59718943f4e878b51bfd48fe9fbce70765ee198b1a49c43e5
systemd-debuginfo-219-78.el7_9.11.s390.rpm SHA-256: 75373970a737134583f55f00537f4e10714dbd78e117c58c79823cae095bfff0
systemd-debuginfo-219-78.el7_9.11.s390.rpm SHA-256: 75373970a737134583f55f00537f4e10714dbd78e117c58c79823cae095bfff0
systemd-debuginfo-219-78.el7_9.11.s390x.rpm SHA-256: acf4e40c532a084b70b386685d5f3b3a12c96b78f4be0c5d07707510a8770127
systemd-debuginfo-219-78.el7_9.11.s390x.rpm SHA-256: acf4e40c532a084b70b386685d5f3b3a12c96b78f4be0c5d07707510a8770127
systemd-devel-219-78.el7_9.11.s390.rpm SHA-256: 61b749bcb9cd592db03645b68415bde6e3dafb0a9c2b46756ccb60cc495ebf25
systemd-devel-219-78.el7_9.11.s390x.rpm SHA-256: 0873bd037ad7c9c6728d989f97924632d8042fe8088309117e6858cdd632a888
systemd-journal-gateway-219-78.el7_9.11.s390x.rpm SHA-256: ce1d386f3d8a055083f5d374b9bc2860849408bb38a464f99c9677d3123b5a3d
systemd-libs-219-78.el7_9.11.s390.rpm SHA-256: 42a96a7fcd4a29e2f2ed33a2f8f816801f63b358da66f03d20df0f9be263b432
systemd-libs-219-78.el7_9.11.s390x.rpm SHA-256: 4296a70792552107817f49994a0b2ec5995983ad81bc1ebe949e00a867adc7b2
systemd-networkd-219-78.el7_9.11.s390x.rpm SHA-256: 1cbacc5b2afa68373cc1f16536a767e9e9d02efd0985bb4544c6933951e1dab8
systemd-python-219-78.el7_9.11.s390x.rpm SHA-256: 85fff58f48077bebc8131bfdf620b3b2520ff54439d2f132c808b72a3d77b5bf
systemd-resolved-219-78.el7_9.11.s390.rpm SHA-256: 027fec65ee015296a7a299433036386beb468be51adfcc211e6bdf667054a707
systemd-resolved-219-78.el7_9.11.s390x.rpm SHA-256: 387bafd9924d96b77255eafaf33de8ae1bd659eda60007b88c150533d82d5ed0
systemd-sysv-219-78.el7_9.11.s390x.rpm SHA-256: 96dc94d91779061170aef14adab1cb2207060ffc28e4eddfd6dd2400ffd061a5

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
systemd-219-78.el7_9.11.src.rpm SHA-256: b479d6f5b4e6ff0470bbbdcf821aa511dada38f4a3efe576d88fe146d7dfd08a
ppc64
libgudev1-219-78.el7_9.11.ppc.rpm SHA-256: 59f232796b35fec051399470645c9542fa2cf65fe472fc694244e36f4de7f36a
libgudev1-219-78.el7_9.11.ppc64.rpm SHA-256: 406d2bb4682ddf350d35f760895dfb76cbfe960608b4b96333aea10e1bd429b0
libgudev1-devel-219-78.el7_9.11.ppc.rpm SHA-256: 9a249fcbe9a307c71993ea247c6afe34f0dd5e33d8a94777ba1a8db139079d17
libgudev1-devel-219-78.el7_9.11.ppc64.rpm SHA-256: a8f497d2055febe8d3a5641c26646f7099727a933ec30e2ab15688405dc3c75f
systemd-219-78.el7_9.11.ppc64.rpm SHA-256: ef2f6c84d6be8822b3df4c826662ed0ab2f2d655e5c30ab5a9a74058802027a7
systemd-debuginfo-219-78.el7_9.11.ppc.rpm SHA-256: 6b58ff8bb8a27911a3c1de21c6d048b45c4ae2cddaabe5d6295f748bb63b523a
systemd-debuginfo-219-78.el7_9.11.ppc.rpm SHA-256: 6b58ff8bb8a27911a3c1de21c6d048b45c4ae2cddaabe5d6295f748bb63b523a
systemd-debuginfo-219-78.el7_9.11.ppc64.rpm SHA-256: d942b37ff3ebec2be638de313b0bd271439c4c94ffb4ee61689a4a7e6ca77462
systemd-debuginfo-219-78.el7_9.11.ppc64.rpm SHA-256: d942b37ff3ebec2be638de313b0bd271439c4c94ffb4ee61689a4a7e6ca77462
systemd-devel-219-78.el7_9.11.ppc.rpm SHA-256: 32aac8ccf7c94c6b9b9ebbc0134fe41fd594514d8a9669250dde653ab8322ee4
systemd-devel-219-78.el7_9.11.ppc64.rpm SHA-256: e462edd2e463a46f84c221505d6cc98b3a590e1d05decb054c5fbba3b0fa50c6
systemd-journal-gateway-219-78.el7_9.11.ppc64.rpm SHA-256: 96fc0d333445956bf70bfbc2d6dd97efdd00d2ac16ab85bb8b8273cc495f53c0
systemd-libs-219-78.el7_9.11.ppc.rpm SHA-256: 12e4cdbe7325a755d3abbb2ff6b8f52f64733a91585b3f5fcad5a8c974bcdfd6
systemd-libs-219-78.el7_9.11.ppc64.rpm SHA-256: 7c7648604ea996e5e8d9f163702467e36be5519584679d8baf47d3d2d6832b75
systemd-networkd-219-78.el7_9.11.ppc64.rpm SHA-256: c864805c93950e59463ba21c003427f8af8d56e23a2a1b02c66b561522f80af5
systemd-python-219-78.el7_9.11.ppc64.rpm SHA-256: 5f1530b5f6c6b0d801dfcbebba19ab0b063bd51ed9ee39e912dfe8fc22a9124e
systemd-resolved-219-78.el7_9.11.ppc.rpm SHA-256: f3975ea39e6b448c54dc996fb589171c71bdecc2a61cca0715bbcf9e0cdb7baf
systemd-resolved-219-78.el7_9.11.ppc64.rpm SHA-256: 217d75632095653fb8a1fe97a2a7a945e931b347ce6b6d662b1379d414c68fff
systemd-sysv-219-78.el7_9.11.ppc64.rpm SHA-256: 8968812033db7e8e1bcfb723aa99eaecb0e572bfca096016e3edbe3a9a6f0606

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
systemd-219-78.el7_9.11.src.rpm SHA-256: b479d6f5b4e6ff0470bbbdcf821aa511dada38f4a3efe576d88fe146d7dfd08a
ppc64le
libgudev1-219-78.el7_9.11.ppc64le.rpm SHA-256: 2f4a14b3f8204a8c4871f825e3a78eaa40e6c856006740bf4214d4e57cf02feb
libgudev1-devel-219-78.el7_9.11.ppc64le.rpm SHA-256: 284a39bee7b94546b3e43fc5a15d4548ffdce68b6cca9d70b636b1567979a2c9
systemd-219-78.el7_9.11.ppc64le.rpm SHA-256: f0689c54e1f338b35572d497097899e4dac55e5f3072871d65a5d8c58b8b360e
systemd-debuginfo-219-78.el7_9.11.ppc64le.rpm SHA-256: 218e11b3a8723886c309edbd44c43f52d4d3a28f493de4f1c41f219750e26d10
systemd-debuginfo-219-78.el7_9.11.ppc64le.rpm SHA-256: 218e11b3a8723886c309edbd44c43f52d4d3a28f493de4f1c41f219750e26d10
systemd-devel-219-78.el7_9.11.ppc64le.rpm SHA-256: 982220ca2c354de020536a761ed8a18d4266547f78fcb01f76b1e4d1e130fa34
systemd-journal-gateway-219-78.el7_9.11.ppc64le.rpm SHA-256: 09f5fe08e562045251cb60ee07a3efb7e6d226f45b2b957c2a65e9cb9f83e3da
systemd-libs-219-78.el7_9.11.ppc64le.rpm SHA-256: dfbb2c9279ce699b614b16fec0193a1ee5411b4c06ea4c4361a92846e08c1246
systemd-networkd-219-78.el7_9.11.ppc64le.rpm SHA-256: 79e2a441d559d9255b9cf66422de02395c0928f1c931e5d4e93221d543bb9864
systemd-python-219-78.el7_9.11.ppc64le.rpm SHA-256: 5047b235e6065f76c6cd353f2df6fb8f7c4876f0a7d0167d439f1cdbaad53169
systemd-resolved-219-78.el7_9.11.ppc64le.rpm SHA-256: 9a8a52a5576f9b6f971114442259a0d39e0c46b2d4c9a2808b437a15015eabcb
systemd-sysv-219-78.el7_9.11.ppc64le.rpm SHA-256: c16cbf5cb9421c687673dcdfb67c66859995666dc972df37fae8e338c914eb4f

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.