A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

An update of the systemd package has been released.

This update for systemd fixes the following issues: This security issue was fixed :

  - CVE-2016-10156: Fix permissions set on permanent timer     timestamp files, preventing local unprivileged users     from escalating privileges (bsc#1020601).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for systemd fixes the following issues :

This security issue was fixed :

  - CVE-2016-10156: Fix permissions set on permanent timer     timestamp files, preventing local unprivileged users     from escalating privileges (bsc#1020601).

These non-security issues were fixed :

  - Fix permission set on /var/lib/systemd/linger/*

  - install: follow config_path symlink (#3362)

  - install: fix disable when /etc/systemd/system is a     symlink (bsc#1014560)

  - run: make --slice= work in conjunction with --scope     (bsc#1014566)

  - core: don't dispatch load queue when setting Slice= for     transient units

  - systemctl: remove duplicate entries showed by     list-dependencies (#5049) (bsc#1012266)

  - rule: don't automatically online standby memory on s390x     (bsc#997682)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

ID	Name	Product	Family	Severity
121671	Photon OS 1.0: Systemd PHSA-2017-0005	Nessus	PhotonOS Local Security Checks	high
96793	SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2017:0279-1)	Nessus	SuSE Local Security Checks	high
96788	openSUSE Security Update : systemd (openSUSE-2017-150)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2016-10156

high

Tenable Plugins

high

high

high