SUSE-SU-2019:1265-1
Vulnerability Summary
Timeline
Description
Security update for systemd This update for systemd fixes the following issues: Security issues fixed: - CVE-2018-6954: Fixed a vulnerability in the symlink handling of systemd-tmpfiles which allowed a local user to obtain ownership of arbitrary files (bsc#1080919). - CVE-2019-3842: Fixed a vulnerability in pam_systemd which allowed a local user to escalate privileges (bsc#1132348). - CVE-2019-6454: Fixed a denial of service caused by long dbus messages (bsc#1125352). Non-security issues fixed: - systemd-coredump: generate a stack trace of all core dumps (jsc#SLE-5933) - udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400) - sd-bus: bump message queue size again (bsc#1132721) - core: only watch processes when it's really necessary (bsc#955942 bsc#1128657) - rules: load drivers only on 'add' events (bsc#1126056) - sysctl: Don't pass null directive argument to '%s' (bsc#1121563) - Do not automatically online memory on s390x (bsc#1127557)
Affected Systems
- suse•systemd&distro=SUSE Enterprise Storage 4
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Desktop 12 SP3
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Desktop 12 SP4
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server 12 SP2-BCL
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server 12 SP2-LTSS
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server 12 SP3
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server 12 SP4
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Software Development Kit 12 SP3
< 228-150.66.4
- suse•systemd&distro=SUSE Linux Enterprise Software Development Kit 12 SP4
< 228-150.66.4
- suse•systemd&distro=SUSE OpenStack Cloud 7
< 228-150.66.4
References (16)
- https://www.suse.com/support/update/announcement/2019/suse-su-20191265-1/
- https://bugzilla.suse.com/1080919
- https://bugzilla.suse.com/1121563
- https://bugzilla.suse.com/1125352
- https://bugzilla.suse.com/1126056
- https://bugzilla.suse.com/1127557
- https://bugzilla.suse.com/1128657
- https://bugzilla.suse.com/1130230
- https://bugzilla.suse.com/1132348
- https://bugzilla.suse.com/1132400
- https://bugzilla.suse.com/1132721
- https://bugzilla.suse.com/955942
- https://www.suse.com/security/cve/CVE-2018-6954
- https://www.suse.com/security/cve/CVE-2019-3842
- https://www.suse.com/security/cve/CVE-2019-6454
- https://bugzilla.suse.com/SLE-5933