systemd: two vulnerabilities
| Package(s): | systemd | CVE #(s): | CVE-2014-9770 CVE-2015-8842 | ||||||||
| Created: | April 19, 2016 | Updated: | April 20, 2016 | ||||||||
| Description: | From the openSUSE bug report:
On Leap archived journal files in /var/log/journal/$uuid are all world-readable - both system and user. The current journal (i.e. system.journal for system instance or user-$UID.journal for user) are correctly restricted to root/systemd-journal or owning user). This allows any user to read anyone's archived journals by using explicit journalctl --file=/path/to/archived/file This problem does not exist on Tumbleweed where access to archived files are restricted in the same way as to current journal. When user attempts to read journal without specifying filename, journalctl tries to open current journal first and errors out, which hides this issue. On 13.2 it is worse - even current log in /run/log/journal is world-readable. (CVE-2014-9770) Unspecified (CVE-2015-8842) | ||||||||||
| Alerts: |
| ||||||||||