SUSE-SU-2019:1364-1

CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348).
CVE-2019-6454: Fixed a denial of service via crafted D-Bus message (bsc#1125352).
CVE-2019-3843, CVE-2019-3844: Fixed a privilege escalation where services with DynamicUser could gain new privileges or create SUID/SGID binaries (bsc#1133506, bsc#1133509).

Non-security issued fixed:

logind: fix killing of scopes (bsc#1125604)
namespace: make MountFlags=shared work again (bsc#1124122)
rules: load drivers only on 'add' events (bsc#1126056)
sysctl: Don't pass null directive argument to '%s' (bsc#1121563)
systemd-coredump: generate a stack trace of all core dumps and log into the journal (jsc#SLE-5933)
udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400)
sd-bus: bump message queue size again (bsc#1132721)
Do not automatically online memory on s390x (bsc#1127557)
Removed sg.conf (bsc#1036463)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 / systemd

Package

Name: systemd
Purl: pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

234-24.30.1

Ecosystem specific

{
    "binaries": [
        {
            "systemd-coredump": "234-24.30.1",
            "libsystemd0-32bit": "234-24.30.1",
            "systemd-devel": "234-24.30.1",
            "systemd-bash-completion": "234-24.30.1",
            "systemd-sysvinit": "234-24.30.1",
            "udev": "234-24.30.1",
            "systemd-32bit": "234-24.30.1",
            "libudev1": "234-24.30.1",
            "systemd-container": "234-24.30.1",
            "systemd": "234-24.30.1",
            "libudev-devel": "234-24.30.1",
            "libudev1-32bit": "234-24.30.1",
            "libsystemd0": "234-24.30.1"
        }
    ]
}