Security update for systemd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0428-1 Final 1 1 2019-02-19T10:00:42Z current 2019-02-19T10:00:42Z 2019-02-19T10:00:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for systemd This update for systemd fixes the following issues: Security vulnerability fixed: - CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user (bsc#1125352) Other bug fixes and changes: - journal-remote: set a limit on the number of fields in a message - journal-remote: verify entry length from header - journald: set a limit on the number of fields (1k) - journald: do not store the iovec entry for process commandline on stack - core: include Found state in device dumps - device: fix serialization and deserialization of DeviceFound - fix path in btrfs rule (#6844) - assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025) - Update systemd-system.conf.xml (bsc#1122000) - units: inform user that the default target is started after exiting from rescue or emergency mode - manager: don't skip sigchld handler for main and control pid for services (#3738) - core: Add helper functions unit_{main, control}_pid - manager: Fixing a debug printf formatting mistake (#3640) - manager: Only invoke a single sigchld per unit within a cleanup cycle (bsc#1117382) - core: update invoke_sigchld_event() to handle NULL ->sigchld_event() - sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#3631) - unit: rework a bit how we keep the service fdstore from being destroyed during service restart (bsc#1122344) - core: when restarting services, don't close fds - cryptsetup: Add dependency on loopback setup to generated units - journal-gateway: use localStorage['cursor'] only when it has valid value - journal-gateway: explicitly declare local variables - analyze: actually select longest activated-time of services - sd-bus: fix implicit downcast of bitfield reported by LGTM - core: free lines after reading them (bsc#1123892) - pam_systemd: reword message about not creating a session (bsc#1111498) - pam_systemd: suppress LOG_DEBUG log messages if debugging is off (bsc#1111498) - main: improve RLIMIT_NOFILE handling (#5795) (bsc#1120658) - sd-bus: if we receive an invalid dbus message, ignore and proceeed - automount: don't pass non-blocking pipe to kernel. - units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333) - units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-428,Container suse/sles12sp3:latest-2019-428,Container suse/sles12sp4:latest-2019-428,Image SLES12-SP4-Azure-BYOS-2019-428,Image SLES12-SP4-EC2-HVM-BYOS-2019-428,Image SLES12-SP4-GCE-BYOS-2019-428,Image SLES12-SP4-OCI-BYOS-2019-428,Image SLES12-SP4-SAP-Azure-2019-428,Image SLES12-SP4-SAP-Azure-BYOS-2019-428,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-428,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-428,Image SLES12-SP4-SAP-EC2-HVM-2019-428,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-428,Image SLES12-SP4-SAP-GCE-2019-428,Image SLES12-SP4-SAP-GCE-BYOS-2019-428,Image SLES12-SP4-SAP-OCI-BYOS-2019-428,SUSE-2019-428,SUSE-OpenStack-Cloud-7-2019-428,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-428,SUSE-SLE-DESKTOP-12-SP3-2019-428,SUSE-SLE-DESKTOP-12-SP4-2019-428,SUSE-SLE-SAP-12-SP2-2019-428,SUSE-SLE-SDK-12-SP3-2019-428,SUSE-SLE-SDK-12-SP4-2019-428,SUSE-SLE-SERVER-12-SP2-2019-428,SUSE-SLE-SERVER-12-SP2-BCL-2019-428,SUSE-SLE-SERVER-12-SP3-2019-428,SUSE-SLE-SERVER-12-SP4-2019-428,SUSE-Storage-4-2019-428 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190428-1/ Link for SUSE-SU-2019:0428-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005135.html E-Mail link for SUSE-SU-2019:0428-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1111498 SUSE Bug 1111498 https://bugzilla.suse.com/1117025 SUSE Bug 1117025 https://bugzilla.suse.com/1117382 SUSE Bug 1117382 https://bugzilla.suse.com/1120658 SUSE Bug 1120658 https://bugzilla.suse.com/1122000 SUSE Bug 1122000 https://bugzilla.suse.com/1122344 SUSE Bug 1122344 https://bugzilla.suse.com/1123333 SUSE Bug 1123333 https://bugzilla.suse.com/1123892 SUSE Bug 1123892 https://bugzilla.suse.com/1125352 SUSE Bug 1125352 https://www.suse.com/security/cve/CVE-2019-6454/ SUSE CVE CVE-2019-6454 page Container caasp/v4/nginx-ingress-controller:beta1 Container suse/sles12sp3:latest Container suse/sles12sp4:latest Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS SUSE Enterprise Storage 4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE OpenStack Cloud 7 libsystemd0-228-150.63.1 libudev1-228-150.63.1 systemd-228-150.63.1 systemd-sysvinit-228-150.63.1 udev-228-150.63.1 libsystemd0-32bit-228-150.63.1 libsystemd0-64bit-228-150.63.1 libsystemd0-mini-228-150.63.1 libudev-devel-228-150.63.1 libudev-mini-devel-228-150.63.1 libudev-mini1-228-150.63.1 libudev1-32bit-228-150.63.1 libudev1-64bit-228-150.63.1 nss-myhostname-228-150.63.1 nss-myhostname-32bit-228-150.63.1 nss-myhostname-64bit-228-150.63.1 nss-mymachines-228-150.63.1 systemd-32bit-228-150.63.1 systemd-64bit-228-150.63.1 systemd-bash-completion-228-150.63.1 systemd-devel-228-150.63.1 systemd-logger-228-150.63.1 systemd-mini-228-150.63.1 systemd-mini-bash-completion-228-150.63.1 systemd-mini-devel-228-150.63.1 systemd-mini-sysvinit-228-150.63.1 udev-mini-228-150.63.1 libsystemd0-228-150.63.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libudev1-228-150.63.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 systemd-228-150.63.1 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libsystemd0-228-150.63.1 as a component of Container suse/sles12sp3:latest libudev1-228-150.63.1 as a component of Container suse/sles12sp3:latest systemd-228-150.63.1 as a component of Container suse/sles12sp3:latest libsystemd0-228-150.63.1 as a component of Container suse/sles12sp4:latest libudev1-228-150.63.1 as a component of Container suse/sles12sp4:latest libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-Azure-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-Azure-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-Azure-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-Azure-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-Azure-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-GCE-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-GCE-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-GCE-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-GCE-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-GCE-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-OCI-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-OCI-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-OCI-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-OCI-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-OCI-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libsystemd0-228-150.63.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libudev1-228-150.63.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS systemd-228-150.63.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS systemd-sysvinit-228-150.63.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS udev-228-150.63.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libsystemd0-228-150.63.1 as a component of SUSE Enterprise Storage 4 libsystemd0-32bit-228-150.63.1 as a component of SUSE Enterprise Storage 4 libudev1-228-150.63.1 as a component of SUSE Enterprise Storage 4 libudev1-32bit-228-150.63.1 as a component of SUSE Enterprise Storage 4 systemd-228-150.63.1 as a component of SUSE Enterprise Storage 4 systemd-32bit-228-150.63.1 as a component of SUSE Enterprise Storage 4 systemd-bash-completion-228-150.63.1 as a component of SUSE Enterprise Storage 4 systemd-sysvinit-228-150.63.1 as a component of SUSE Enterprise Storage 4 udev-228-150.63.1 as a component of SUSE Enterprise Storage 4 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 udev-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 udev-228-150.63.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL udev-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS udev-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 udev-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP3 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 udev-228-150.63.1 as a component of SUSE Linux Enterprise Server 12 SP4 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 udev-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 udev-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libsystemd0-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsystemd0-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev1-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev1-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-32bit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-bash-completion-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-sysvinit-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 udev-228-150.63.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev-devel-228-150.63.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 systemd-devel-228-150.63.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libudev-devel-228-150.63.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 systemd-devel-228-150.63.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libsystemd0-228-150.63.1 as a component of SUSE OpenStack Cloud 7 libsystemd0-32bit-228-150.63.1 as a component of SUSE OpenStack Cloud 7 libudev1-228-150.63.1 as a component of SUSE OpenStack Cloud 7 libudev1-32bit-228-150.63.1 as a component of SUSE OpenStack Cloud 7 systemd-228-150.63.1 as a component of SUSE OpenStack Cloud 7 systemd-32bit-228-150.63.1 as a component of SUSE OpenStack Cloud 7 systemd-bash-completion-228-150.63.1 as a component of SUSE OpenStack Cloud 7 systemd-sysvinit-228-150.63.1 as a component of SUSE OpenStack Cloud 7 udev-228-150.63.1 as a component of SUSE OpenStack Cloud 7 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). CVE-2019-6454 Container caasp/v4/nginx-ingress-controller:beta1:libsystemd0-228-150.63.1 Container caasp/v4/nginx-ingress-controller:beta1:libudev1-228-150.63.1 Container caasp/v4/nginx-ingress-controller:beta1:systemd-228-150.63.1 Container suse/sles12sp3:latest:libsystemd0-228-150.63.1 Container suse/sles12sp3:latest:libudev1-228-150.63.1 Container suse/sles12sp3:latest:systemd-228-150.63.1 Container suse/sles12sp4:latest:libsystemd0-228-150.63.1 Container suse/sles12sp4:latest:libudev1-228-150.63.1 Image SLES12-SP4-Azure-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-Azure-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-Azure-BYOS:systemd-228-150.63.1 Image SLES12-SP4-Azure-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-Azure-BYOS:udev-228-150.63.1 Image SLES12-SP4-EC2-HVM-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-EC2-HVM-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-EC2-HVM-BYOS:systemd-228-150.63.1 Image SLES12-SP4-EC2-HVM-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-EC2-HVM-BYOS:udev-228-150.63.1 Image SLES12-SP4-GCE-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-GCE-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-GCE-BYOS:systemd-228-150.63.1 Image SLES12-SP4-GCE-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-GCE-BYOS:udev-228-150.63.1 Image SLES12-SP4-OCI-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-OCI-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-OCI-BYOS:systemd-228-150.63.1 Image SLES12-SP4-OCI-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-OCI-BYOS:udev-228-150.63.1 Image SLES12-SP4-SAP-Azure-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-Azure-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-SAP-Azure-BYOS:systemd-228-150.63.1 Image SLES12-SP4-SAP-Azure-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-Azure-BYOS:udev-228-150.63.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libudev1-228-150.63.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:systemd-228-150.63.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:udev-228-150.63.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libudev1-228-150.63.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:systemd-228-150.63.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:udev-228-150.63.1 Image SLES12-SP4-SAP-Azure:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-Azure:libudev1-228-150.63.1 Image SLES12-SP4-SAP-Azure:systemd-228-150.63.1 Image SLES12-SP4-SAP-Azure:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-Azure:udev-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:systemd-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:udev-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM:libudev1-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM:systemd-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-EC2-HVM:udev-228-150.63.1 Image SLES12-SP4-SAP-GCE-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-GCE-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-SAP-GCE-BYOS:systemd-228-150.63.1 Image SLES12-SP4-SAP-GCE-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-GCE-BYOS:udev-228-150.63.1 Image SLES12-SP4-SAP-GCE:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-GCE:libudev1-228-150.63.1 Image SLES12-SP4-SAP-GCE:systemd-228-150.63.1 Image SLES12-SP4-SAP-GCE:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-GCE:udev-228-150.63.1 Image SLES12-SP4-SAP-OCI-BYOS:libsystemd0-228-150.63.1 Image SLES12-SP4-SAP-OCI-BYOS:libudev1-228-150.63.1 Image SLES12-SP4-SAP-OCI-BYOS:systemd-228-150.63.1 Image SLES12-SP4-SAP-OCI-BYOS:systemd-sysvinit-228-150.63.1 Image SLES12-SP4-SAP-OCI-BYOS:udev-228-150.63.1 SUSE Enterprise Storage 4:libsystemd0-228-150.63.1 SUSE Enterprise Storage 4:libsystemd0-32bit-228-150.63.1 SUSE Enterprise Storage 4:libudev1-228-150.63.1 SUSE Enterprise Storage 4:libudev1-32bit-228-150.63.1 SUSE Enterprise Storage 4:systemd-228-150.63.1 SUSE Enterprise Storage 4:systemd-32bit-228-150.63.1 SUSE Enterprise Storage 4:systemd-bash-completion-228-150.63.1 SUSE Enterprise Storage 4:systemd-sysvinit-228-150.63.1 SUSE Enterprise Storage 4:udev-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:libsystemd0-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:libudev1-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:systemd-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP3:udev-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:libsystemd0-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:libudev1-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:systemd-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Desktop 12 SP4:udev-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-BCL:udev-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libudev1-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:systemd-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server 12 SP2-LTSS:udev-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:libudev1-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:systemd-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server 12 SP3:udev-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:libudev1-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:systemd-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server 12 SP4:udev-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libudev1-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:systemd-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:udev-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libudev1-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:systemd-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:udev-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-32bit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-bash-completion-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-sysvinit-228-150.63.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:udev-228-150.63.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libudev-devel-228-150.63.1 SUSE Linux Enterprise Software Development Kit 12 SP3:systemd-devel-228-150.63.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libudev-devel-228-150.63.1 SUSE Linux Enterprise Software Development Kit 12 SP4:systemd-devel-228-150.63.1 SUSE OpenStack Cloud 7:libsystemd0-228-150.63.1 SUSE OpenStack Cloud 7:libsystemd0-32bit-228-150.63.1 SUSE OpenStack Cloud 7:libudev1-228-150.63.1 SUSE OpenStack Cloud 7:libudev1-32bit-228-150.63.1 SUSE OpenStack Cloud 7:systemd-228-150.63.1 SUSE OpenStack Cloud 7:systemd-32bit-228-150.63.1 SUSE OpenStack Cloud 7:systemd-bash-completion-228-150.63.1 SUSE OpenStack Cloud 7:systemd-sysvinit-228-150.63.1 SUSE OpenStack Cloud 7:udev-228-150.63.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190428-1/ https://www.suse.com/security/cve/CVE-2019-6454.html CVE-2019-6454 https://bugzilla.suse.com/1125352 SUSE Bug 1125352