ELA-1165-1 systemd security update

DNSSEC vulnerabilities

2024-08-27
Packagesystemd
Version232-25+deb9u17 (stretch), 241-7~deb10u11 (buster)
Related CVEs CVE-2023-7008 CVE-2023-50387 CVE-2023-50868


Multiple vulnerabilities have been fixed in systemd, the default init system in Debian, when using systemd-resolved with DNSSEC.



For Debian 10 buster, these problems have been fixed in version 241-7~deb10u11.

For Debian 9 stretch, these problems have been fixed in version 232-25+deb9u17.

We recommend that you upgrade your systemd packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.