- Fix a local vulnerability from a race condition in     chown-recursive (CVE-2018-15687, #1639076)

  - Fix a local vulnerability from invalid handling of long     lines in state deserialization (CVE-2018-15686,     #1639071)

  - Fix a remote vulnerability in DHCPv6 in systemd-networkd     (CVE-2018-15688, #1639067)

  - The DHCP server is started only when link is UP

  - DHCPv6 prefix delegation is improved

  - Downgrade logging of various messages and add loging in     other places

  - Many many fixes in error handling and minor memory leaks     and such

  - Fix typos and omissions in documentation

  - Typo in %%_environmnentdir rpm macro is fixed (with     backwards compatibility preserved)

  - Matching by MACAddress= in systemd-networkd is fixed

  - Creation of user runtime directories is improved, and     the user manager is only stopped after 10 s after the     user logs out (#1642460 and other bugs)

  - systemd units systemd-timesyncd, systemd-resolved,     systemd-networkd are switched back to use DynamicUser=0

  - Aliases are now resolved when loading modules from pid1.
    This is a (redundant) fix for a brief kernel regression.

  - 'systemctl --wait start' exits immediately if no valid     units are named

  - zram devices are not considered as candidates for     hibernation

  - ECN is not requested for both in- and out-going     connections (the sysctl overide for net.ipv4.tcp_ecn is     removed)

  - Various smaller improvements to unit ordering and     dependencies

  - generators are now called with the manager's environment

  - Handling of invalid (intentionally corrupt) dbus     messages is improved, fixing potential local DOS avenues

  - The target of symlinks links in .wants/ and .requires/     is now ignored. This fixes an issue where the unit file     would sometimes be loaded from such a symlink, leading     to non-deterministic unit contents.

  - Filtering of kernel threads is improved. This fixes an     issues with newer kernels where hybrid kernel/user     threads are used by bpfilter.

  - 'noresume' can be used on the kernel command line to     force normal boot even if a hibernation images is     present

  - Hibernation is not advertised if resume= is not present     on the kernenl command line

  - Hibernation/Suspend/... modes can be disabled using     AllowSuspend=, AllowHibernation=,     AllowSuspendThenHibernate=, AllowHybridSleep=

  - LOGO= and DOCUMENTATION_URL= are documented for the     os-release file

  - The hashmap mempool is now only used internally in     systemd, and is disabled for external users of the     systemd libraries

  - Additional state is serialized/deserialized when logind     is restarted, fixing the handling of user objects

  - Catalog entries for the journal are improved (#1639482)

  - If suspend fails, the post-suspend hooks are still     called.

  - Various build issues on less-common architectures are     fixed

No need to reboot or log out.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

Fedora 29 : systemd (2018-c402eea18b)

high Nessus Plugin ID 120769

Version 1.7