SUSE-SU-2019:0428-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20190428-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:0428-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:0428-1

Related

CVE-2019-6454

Published

2019-02-19T10:00:42Z

Modified

2019-02-19T10:00:42Z

Summary

Security update for systemd

Details

This update for systemd fixes the following issues:

Security vulnerability fixed:

CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user (bsc#1125352)

Other bug fixes and changes:

journal-remote: set a limit on the number of fields in a message
journal-remote: verify entry length from header
journald: set a limit on the number of fields (1k)
journald: do not store the iovec entry for process commandline on stack
core: include Found state in device dumps
device: fix serialization and deserialization of DeviceFound
fix path in btrfs rule (#6844)
assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025)
Update systemd-system.conf.xml (bsc#1122000)
units: inform user that the default target is started after exiting from rescue or emergency mode
manager: don't skip sigchld handler for main and control pid for services (#3738)
core: Add helper functions unit{main, control}pid
manager: Fixing a debug printf formatting mistake (#3640)
manager: Only invoke a single sigchld per unit within a cleanup cycle (bsc#1117382)
core: update invokesigchldevent() to handle NULL ->sigchld_event()
sd-event: expose the event loop iteration counter via sdeventget_iteration() (#3631)
unit: rework a bit how we keep the service fdstore from being destroyed during service restart (bsc#1122344)
core: when restarting services, don't close fds
cryptsetup: Add dependency on loopback setup to generated units
journal-gateway: use localStorage['cursor'] only when it has valid value
journal-gateway: explicitly declare local variables
analyze: actually select longest activated-time of services
sd-bus: fix implicit downcast of bitfield reported by LGTM
core: free lines after reading them (bsc#1123892)
pam_systemd: reword message about not creating a session (bsc#1111498)
pamsystemd: suppress LOGDEBUG log messages if debugging is off (bsc#1111498)
main: improve RLIMIT_NOFILE handling (#5795) (bsc#1120658)
sd-bus: if we receive an invalid dbus message, ignore and proceeed
automount: don't pass non-blocking pipe to kernel.
units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)
units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333)

References

Affected packages

SUSE:OpenStack Cloud 7 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP3 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP4 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP3 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "systemd-devel": "228-150.63.1",
            "libudev-devel": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP4 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "systemd-devel": "228-150.63.1",
            "libudev-devel": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-BCL / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}

SUSE:Enterprise Storage 4 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.63.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.63.1",
            "libsystemd0": "228-150.63.1",
            "udev": "228-150.63.1",
            "libudev1": "228-150.63.1",
            "systemd-32bit": "228-150.63.1",
            "systemd-bash-completion": "228-150.63.1",
            "libsystemd0-32bit": "228-150.63.1",
            "systemd": "228-150.63.1",
            "systemd-sysvinit": "228-150.63.1"
        }
    ]
}