Oval Definition:oval:org.opensuse.security:def:80732
Revision Date:2019-05-16Version:1
Title:Security update for systemd (Important)
Description:

This update for systemd fixes the following issues:

Security issues fixed:

- CVE-2018-6954: Fixed a vulnerability in the symlink handling of systemd-tmpfiles which allowed a local user to obtain ownership of arbitrary files (bsc#1080919). - CVE-2019-3842: Fixed a vulnerability in pam_systemd which allowed a local user to escalate privileges (bsc#1132348). - CVE-2019-6454: Fixed a denial of service caused by long dbus messages (bsc#1125352).

Non-security issues fixed:

- systemd-coredump: generate a stack trace of all core dumps (jsc#SLE-5933) - udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400) - sd-bus: bump message queue size again (bsc#1132721) - core: only watch processes when it's really necessary (bsc#955942 bsc#1128657) - rules: load drivers only on 'add' events (bsc#1126056) - sysctl: Don't pass null directive argument to '%s' (bsc#1121563) - Do not automatically online memory on s390x (bsc#1127557)
Family:unixClass:patch
Status:Reference(s):1080919
1121563
1125352
1126056
1127557
1128657
1130230
1132348
1132400
1132721
955942
CVE-2018-6954
CVE-2019-3842
CVE-2019-6454
SUSE-SU-2019:1265-1
Platform(s):SUSE OpenStack Cloud 7
Product(s):
Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • libsystemd0-228-150.66.4 is installed
  • OR libsystemd0-32bit-228-150.66.4 is installed
  • OR libudev-devel-228-150.66.4 is installed
  • OR libudev1-228-150.66.4 is installed
  • OR libudev1-32bit-228-150.66.4 is installed
  • OR systemd-228-150.66.4 is installed
  • OR systemd-32bit-228-150.66.4 is installed
  • OR systemd-bash-completion-228-150.66.4 is installed
  • OR systemd-sysvinit-228-150.66.4 is installed
  • OR udev-228-150.66.4 is installed
  • BACK