SUSE-SU-2020:0353-1
- Source
- https://www.suse.com/support/update/announcement/2020/suse-su-20200353-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0353-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2020:0353-1
- Related
- Published
- 2020-02-06T16:34:47Z
- Modified
- 2020-02-06T16:34:47Z
- Summary
- Security update for systemd
- Details
-
This update for systemd provides the following fixes:
- CVE-2020-1712 (bsc#bsc#1162108) Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted Dbus messages.
- sd-bus: Deal with cookie overruns. (bsc#1150595)
- rules: Add by-id symlinks for persistent memory. (bsc#1140631)
- Drop the old fds used for logging and reopen them in the sub process before doing any new logging. (bsc#1154948)
- Fix warnings thrown during package installation (bsc#1154043)
- Fix for systemctl hanging by restart. (bsc#1139459)
- man: mention that alias names are only effective after 'systemctl enable'. (bsc#1151377)
- ask-password: improve log message when inotify limit is reached. (bsc#1155574)
- udevd: wait for workers to finish when exiting. (bsc#1106383)
- core: fragments of masked units ought not be considered for NeedDaemonReload. (bsc#1156482)
- udev: fix 'NULL' deref when executing rules. (bsc#1151506)
- Introduce function for reading virtual files in 'sysfs' and 'procfs'. (bsc#1133495, bsc#1159814)
- References
-
- https://www.suse.com/support/update/announcement/2020/suse-su-20200353-1/
- https://bugzilla.suse.com/1106383
- https://bugzilla.suse.com/1127557
- https://bugzilla.suse.com/1133495
- https://bugzilla.suse.com/1139459
- https://bugzilla.suse.com/1140631
- https://bugzilla.suse.com/1150595
- https://bugzilla.suse.com/1151377
- https://bugzilla.suse.com/1151506
- https://bugzilla.suse.com/1154043
- https://bugzilla.suse.com/1154948
- https://bugzilla.suse.com/1155574
- https://bugzilla.suse.com/1156482
- https://bugzilla.suse.com/1159814
- https://bugzilla.suse.com/1162108
- https://www.suse.com/security/cve/CVE-2020-1712
Affected packages
SUSE:Linux Enterprise Software Development Kit 12 SP5 / systemd
Package
- Name
- systemd
- Purl
- purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
SUSE:Linux Enterprise Server 12 SP5 / systemd
Package
- Name
- systemd
- Purl
- purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed228-157.9.1
Ecosystem specific
{
"binaries": [
{
"libudev1-32bit": "228-157.9.1",
"libsystemd0": "228-157.9.1",
"udev": "228-157.9.1",
"libudev1": "228-157.9.1",
"systemd-32bit": "228-157.9.1",
"systemd-bash-completion": "228-157.9.1",
"libsystemd0-32bit": "228-157.9.1",
"systemd": "228-157.9.1",
"systemd-sysvinit": "228-157.9.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 12 SP5 / systemd
Package
- Name
- systemd
- Purl
- purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed228-157.9.1
Ecosystem specific
{
"binaries": [
{
"libudev1-32bit": "228-157.9.1",
"libsystemd0": "228-157.9.1",
"udev": "228-157.9.1",
"libudev1": "228-157.9.1",
"systemd-32bit": "228-157.9.1",
"systemd-bash-completion": "228-157.9.1",
"libsystemd0-32bit": "228-157.9.1",
"systemd": "228-157.9.1",
"systemd-sysvinit": "228-157.9.1"
}
]
}