CVE ID:	CVE-2019-15718
Description:	In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
Test IDs:	1.3.6.1.4.1.25623.1.0.877186   1.3.6.1.4.1.25623.1.0.844162   1.3.6.1.4.1.25623.1.1.2.2019.2121   1.3.6.1.4.1.25623.1.1.10.2019.0330   1.3.6.1.4.1.25623.1.1.2.2020.1054
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-15718 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIKGKXZ5OEGOEYURHLJHEMFYNLEGAW5B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BRE5IS24XTF5WNZGH2L7GSQJKARBOEGL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2WNHRJW4XI6H5YMDG4BUFGPAXWUMUVG/ http://www.openwall.com/lists/oss-security/2019/09/03/1 https://bugzilla.redhat.com/show_bug.cgi?id=1746057 RedHat Security Advisories: RHSA-2019:3592 https://access.redhat.com/errata/RHSA-2019:3592 RedHat Security Advisories: RHSA-2019:3941 https://access.redhat.com/errata/RHSA-2019:3941