SUSE-SU-2020:0331-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2020/suse-su-20200331-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2020:0331-1

Related

CVE-2020-1712

Published

2020-03-18T11:53:17Z

Modified

2020-03-18T11:53:17Z

Summary

Security update for systemd

Details

This update for systemd fixes the following issues:

CVE-2020-1712 (bsc#bsc#1162108) Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted Dbus messages.
Unconfirmed fix for prevent hanging of systemctl during restart. (bsc#1139459)
Fix warnings thrown during package installation. (bsc#1154043)
Fix for system-udevd prevent crash within OES2018. (bsc#1151506)
Fragments of masked units ought not be considered for 'NeedDaemonReload'. (bsc#1156482)
Wait for workers to finish when exiting. (bsc#1106383)
Improve log message when inotify limit is reached. (bsc#1155574)
Mention in the man pages that alias names are only effective after command 'systemctl enable'. (bsc#1151377)
Introduce function for reading virtual files in 'sysfs' and 'procfs'. (bsc#1133495, bsc#1159814)

References

Affected packages

SUSE:HPE Helion OpenStack 8 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:OpenStack Cloud 7 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:OpenStack Cloud 8 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 8 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP4 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP4 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "systemd-devel": "228-150.82.1",
            "libudev-devel": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-BCL / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3-LTSS / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3-BCL / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}

SUSE:Enterprise Storage 5 / systemd

Package

Name: systemd
Purl: purl:rpm/suse/systemd&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

228-150.82.1

Ecosystem specific

{
    "binaries": [
        {
            "libudev1-32bit": "228-150.82.1",
            "libsystemd0": "228-150.82.1",
            "udev": "228-150.82.1",
            "libudev-devel": "228-150.82.1",
            "libudev1": "228-150.82.1",
            "systemd-32bit": "228-150.82.1",
            "systemd-bash-completion": "228-150.82.1",
            "libsystemd0-32bit": "228-150.82.1",
            "systemd": "228-150.82.1",
            "systemd-sysvinit": "228-150.82.1"
        }
    ]
}