libsystemd0-254.8-4.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13665-1 Final 1 1 2024-06-15T00:00:00Z current 2024-06-15T00:00:00Z 2024-06-15T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z libsystemd0-254.8-4.1 on GA media These are all security issues fixed in the libsystemd0-254.8-4.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13665 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-7008/ SUSE CVE CVE-2023-7008 page openSUSE Tumbleweed libsystemd0-254.8-4.1 libsystemd0-32bit-254.8-4.1 libudev1-254.8-4.1 libudev1-32bit-254.8-4.1 systemd-254.8-4.1 systemd-32bit-254.8-4.1 systemd-boot-254.8-4.1 systemd-container-254.8-4.1 systemd-coredump-254.8-4.1 systemd-devel-254.8-4.1 systemd-doc-254.8-4.1 systemd-experimental-254.8-4.1 systemd-homed-254.8-4.1 systemd-journal-remote-254.8-4.1 systemd-lang-254.8-4.1 systemd-network-254.8-4.1 systemd-portable-254.8-4.1 systemd-sysvcompat-254.8-4.1 systemd-testsuite-254.8-4.1 udev-254.8-4.1 libsystemd0-254.8-4.1 as a component of openSUSE Tumbleweed libsystemd0-32bit-254.8-4.1 as a component of openSUSE Tumbleweed libudev1-254.8-4.1 as a component of openSUSE Tumbleweed libudev1-32bit-254.8-4.1 as a component of openSUSE Tumbleweed systemd-254.8-4.1 as a component of openSUSE Tumbleweed systemd-32bit-254.8-4.1 as a component of openSUSE Tumbleweed systemd-boot-254.8-4.1 as a component of openSUSE Tumbleweed systemd-container-254.8-4.1 as a component of openSUSE Tumbleweed systemd-coredump-254.8-4.1 as a component of openSUSE Tumbleweed systemd-devel-254.8-4.1 as a component of openSUSE Tumbleweed systemd-doc-254.8-4.1 as a component of openSUSE Tumbleweed systemd-experimental-254.8-4.1 as a component of openSUSE Tumbleweed systemd-homed-254.8-4.1 as a component of openSUSE Tumbleweed systemd-journal-remote-254.8-4.1 as a component of openSUSE Tumbleweed systemd-lang-254.8-4.1 as a component of openSUSE Tumbleweed systemd-network-254.8-4.1 as a component of openSUSE Tumbleweed systemd-portable-254.8-4.1 as a component of openSUSE Tumbleweed systemd-sysvcompat-254.8-4.1 as a component of openSUSE Tumbleweed systemd-testsuite-254.8-4.1 as a component of openSUSE Tumbleweed udev-254.8-4.1 as a component of openSUSE Tumbleweed A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records. CVE-2023-7008 openSUSE Tumbleweed:libsystemd0-254.8-4.1 openSUSE Tumbleweed:libsystemd0-32bit-254.8-4.1 openSUSE Tumbleweed:libudev1-254.8-4.1 openSUSE Tumbleweed:libudev1-32bit-254.8-4.1 openSUSE Tumbleweed:systemd-254.8-4.1 openSUSE Tumbleweed:systemd-32bit-254.8-4.1 openSUSE Tumbleweed:systemd-boot-254.8-4.1 openSUSE Tumbleweed:systemd-container-254.8-4.1 openSUSE Tumbleweed:systemd-coredump-254.8-4.1 openSUSE Tumbleweed:systemd-devel-254.8-4.1 openSUSE Tumbleweed:systemd-doc-254.8-4.1 openSUSE Tumbleweed:systemd-experimental-254.8-4.1 openSUSE Tumbleweed:systemd-homed-254.8-4.1 openSUSE Tumbleweed:systemd-journal-remote-254.8-4.1 openSUSE Tumbleweed:systemd-lang-254.8-4.1 openSUSE Tumbleweed:systemd-network-254.8-4.1 openSUSE Tumbleweed:systemd-portable-254.8-4.1 openSUSE Tumbleweed:systemd-sysvcompat-254.8-4.1 openSUSE Tumbleweed:systemd-testsuite-254.8-4.1 openSUSE Tumbleweed:udev-254.8-4.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-7008.html CVE-2023-7008 https://bugzilla.suse.com/1218297 SUSE Bug 1218297