Oval Definition:oval:com.redhat.rhsa:def:20192091
Revision Date:2019-08-06Version:637
Title:RHSA-2019:2091: systemd security, bug fix, and enhancement update (Moderate)
Description:The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

  • systemd: line splitting via fgets() allows for state injection during daemon-reexec (CVE-2018-15686)

  • systemd: out-of-bounds read when parsing a crafted syslog message (CVE-2018-16866)

  • systemd: kills privileged process if unprivileged PIDFile was tampered (CVE-2018-16888)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2018-15686
    CVE-2018-16866
    CVE-2018-16888
    RHSA-2019:2091
    Platform(s):Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • libgudev1 is earlier than 0:219-67.el7
  • AND libgudev1 is signed with Red Hat redhatrelease2 key
  • libgudev1-devel is earlier than 0:219-67.el7
  • AND libgudev1-devel is signed with Red Hat redhatrelease2 key
  • systemd is earlier than 0:219-67.el7
  • AND systemd is signed with Red Hat redhatrelease2 key
  • systemd-devel is earlier than 0:219-67.el7
  • AND systemd-devel is signed with Red Hat redhatrelease2 key
  • systemd-journal-gateway is earlier than 0:219-67.el7
  • AND systemd-journal-gateway is signed with Red Hat redhatrelease2 key
  • systemd-libs is earlier than 0:219-67.el7
  • AND systemd-libs is signed with Red Hat redhatrelease2 key
  • systemd-networkd is earlier than 0:219-67.el7
  • AND systemd-networkd is signed with Red Hat redhatrelease2 key
  • systemd-python is earlier than 0:219-67.el7
  • AND systemd-python is signed with Red Hat redhatrelease2 key
  • systemd-resolved is earlier than 0:219-67.el7
  • AND systemd-resolved is signed with Red Hat redhatrelease2 key
  • systemd-sysv is earlier than 0:219-67.el7
  • AND systemd-sysv is signed with Red Hat redhatrelease2 key
  • BACK