Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
Systemd Update Fixes Security and Stability Issues
published 2 years ago
Summary
A security update is available for systemd, a system management tool. This update fixes security issues and stability problems that could allow an attacker to gain unauthorized access or cause system crashes. To stay secure, update your system with the latest version of systemd.
What to do
- Update redhat systemd to version 0:239-74.el8_8.2.
- Update redhat systemd-container to version 0:239-74.el8_8.2.
- Update redhat systemd-container-debuginfo to version 0:239-74.el8_8.2.
- Update redhat systemd-debuginfo to version 0:239-74.el8_8.2.
- Update redhat systemd-debugsource to version 0:239-74.el8_8.2.
- Update redhat systemd-devel to version 0:239-74.el8_8.2.
- Update redhat systemd-journal-remote to version 0:239-74.el8_8.2.
- Update redhat systemd-journal-remote-debuginfo to version 0:239-74.el8_8.2.
- Update redhat systemd-libs to version 0:239-74.el8_8.2.
- Update redhat systemd-libs-debuginfo to version 0:239-74.el8_8.2.
- Update redhat systemd-pam to version 0:239-74.el8_8.2.
- Update redhat systemd-pam-debuginfo to version 0:239-74.el8_8.2.
- Update redhat systemd-tests to version 0:239-74.el8_8.2.
- Update redhat systemd-tests-debuginfo to version 0:239-74.el8_8.2.
- Update redhat systemd-udev to version 0:239-74.el8_8.2.
- Update redhat systemd-udev-debuginfo to version 0:239-74.el8_8.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-container |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-container-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-debugsource |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-devel |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-journal-remote |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-journal-remote-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-libs |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-libs-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-pam |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-pam-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-tests |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-tests-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-udev |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
| Red Hat:enterprise_linux:8::baseos | redhat | systemd-udev-debuginfo |
< 0:239-74.el8_8.2 Fix: upgrade to 0:239-74.el8_8.2
|
Original advisory text
Red Hat Security Advisory: systemd security and bug fix update
References
- https://access.redhat.com/errata/RHSA-2023:3837 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2175611 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2190153 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3837.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-26604 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-26604 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-26604 Vendor Advisory
- https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insec... Third Party Advisory
- https://github.com/systemd/systemd/issues/5666 Third Party Advisory
- https://medium.com/@zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a52... Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Sep 2024
Updated1 May 2026
First seen1 May 2026
Sources
RHSA-2023:3837 · OSV
Track software like this
Free during beta