SUSE-SU-2018:0546-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2018/suse-su-20180546-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2018:0546-1
Upstream
Related
Published
2018-02-26T15:35:50Z
Modified
2026-03-11T06:42:24Z
Summary
Security update for systemd
Details

This update for systemd fixes the following issues:

Security issue fixed:

  • CVE-2017-18078: tmpfiles: refuse to chown()/chmod() files which are hardlinked, unless protected_hardlinks sysctl is on. This could be used by local attackers to gain privileges (bsc#1077925)

Non Security issues fixed:

  • core: use id unit when retrieving unit file state (#8038) (bsc#1075801)

  • cryptsetup-generator: run cryptsetup service before swap unit (#5480)

  • udev-rules: all values can contain escaped double quotes now (#6890)

  • strv: fix buffer size calculation in strv_join_quoted()

  • tmpfiles: change ownership of symlinks too

  • stdio-bridge: Correctly propagate error

  • stdio-bridge: remove dead code

  • remove bus-proxyd (bsc#1057974)

  • core/timer: Prevent timer looping when unit cannot start (bsc#1068588)

  • Make systemd-timesyncd use the openSUSE NTP servers by default Previously systemd-timesyncd used the Google Public NTP servers time{1..4}.google.com

  • Don't ship /usr/lib/systemd/system/tmp.mnt at all (bsc#1071224) But we still ship a copy in /var. Users who want to use tmpfs on /tmp are supposed to add a symlink in /etc/ pointing to the copy shipped in /var. To support the update path we automatically create the symlink if tmp.mount in use is located in /usr.

  • Enable systemd-networkd on Leap distros only (bsc#1071311)

References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP2
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libsystemd0-32bit":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "libudev1-32bit":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-32bit":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Desktop 12 SP3
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libsystemd0-32bit":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "libudev1-32bit":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-32bit":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Server 12 SP2
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libsystemd0-32bit":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "libudev1-32bit":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-32bit":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Server 12 SP3
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libsystemd0-32bit":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "libudev1-32bit":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-32bit":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libsystemd0-32bit":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "libudev1-32bit":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-32bit":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libsystemd0":  "228-150.32.1",
            "libsystemd0-32bit":  "228-150.32.1",
            "libudev1":  "228-150.32.1",
            "libudev1-32bit":  "228-150.32.1",
            "systemd":  "228-150.32.1",
            "systemd-32bit":  "228-150.32.1",
            "systemd-bash-completion":  "228-150.32.1",
            "systemd-sysvinit":  "228-150.32.1",
            "udev":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Software Development Kit 12 SP2
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libudev-devel":  "228-150.32.1",
            "systemd-devel":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"
SUSE:Linux Enterprise Software Development Kit 12 SP3
systemd

Package

Name
systemd
Purl
pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
228-150.32.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libudev-devel":  "228-150.32.1",
            "systemd-devel":  "228-150.32.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0546-1.json"