安全公告详情

NS-SA-2025-0186

2025-07-25 16:49:52

简介

moderate: systemd security update

严重级别

moderate

主题

An update for systemd is now available for NewStart CGSL MAIN 7.02.
NewStart Security has rated this update as having a security impact of moderate. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

详细描述

systemd:


Security Fix(es):systemd: A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.(CVE-2023-7008)
systemd: bugfix


Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 7.02.03B8.

影响组件

  • systemd

影响产品

  • CGSL MAIN 7.02

更新包

{"fix":[{"product":"CGSL MAIN 7.02","pkgs":[{"binary":["systemd-rpm-macros-255-3.zncgsl7.12.noarch.rpm","systemd-udev-255-3.zncgsl7.12.x86_64.rpm","systemd-resolved-255-3.zncgsl7.12.x86_64.rpm","systemd-pam-255-3.zncgsl7.12.x86_64.rpm","systemd-devel-255-3.zncgsl7.12.x86_64.rpm","systemd-libs-255-3.zncgsl7.12.x86_64.rpm","systemd-container-255-3.zncgsl7.12.x86_64.rpm","systemd-255-3.zncgsl7.12.x86_64.rpm"],"source":"systemd-255-3.zncgsl7.12.src.rpm"}]}]}

CVE

参考