Security update for systemd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1842-1 Final 1 1 2020-07-03T20:40:52Z current 2020-07-03T20:40:52Z 2020-07-03T20:40:52Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for systemd This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command (bsc#1161436). - Renamed the persistent link for ATA devices (bsc#1164538) - shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315) - tmpfiles: removed unnecessary assert (bsc#1171145) - pid1: by default make user units inherit their umask from the user manager (bsc#1162698) - manager: fixed job mode when signalled to shutdown etc (bsc#1161262) - coredump: fixed bug that loses core dump files when core dumps are compressed and disk space is low. (bsc#1167622) - udev: inform systemd how many workers we can potentially spawn (#4036) (bsc#1165633) - libblkid: open device in nonblock mode. (bsc#1084671) - udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2020-1842,Container suse/sles12sp3:latest-2020-1842,Container suse/sles12sp4:latest-2020-1842,Image SLES12-SP4-Azure-BYOS-2020-1842,Image SLES12-SP4-EC2-HVM-BYOS-2020-1842,Image SLES12-SP4-GCE-BYOS-2020-1842,Image SLES12-SP4-OCI-BYOS-2020-1842,Image SLES12-SP4-SAP-Azure-2020-1842,Image SLES12-SP4-SAP-Azure-BYOS-2020-1842,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2020-1842,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2020-1842,Image SLES12-SP4-SAP-EC2-HVM-2020-1842,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2020-1842,Image SLES12-SP4-SAP-GCE-2020-1842,Image SLES12-SP4-SAP-GCE-BYOS-2020-1842,Image SLES12-SP4-SAP-OCI-BYOS-2020-1842,SUSE-2020-1842,SUSE-SLE-SDK-12-SP4-2020-1842,SUSE-SLE-SERVER-12-SP4-2020-1842 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201842-1/ Link for SUSE-SU-2020:1842-1 https://lists.suse.com/pipermail/sle-security-updates/2020-July/007072.html E-Mail link for SUSE-SU-2020:1842-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1084671 SUSE Bug 1084671 https://bugzilla.suse.com/1154256 SUSE Bug 1154256 https://bugzilla.suse.com/1157315 SUSE Bug 1157315 https://bugzilla.suse.com/1161262 SUSE Bug 1161262 https://bugzilla.suse.com/1161436 SUSE Bug 1161436 https://bugzilla.suse.com/1162698 SUSE Bug 1162698 https://bugzilla.suse.com/1164538 SUSE Bug 1164538 https://bugzilla.suse.com/1165633 SUSE Bug 1165633 https://bugzilla.suse.com/1167622 SUSE Bug 1167622 https://bugzilla.suse.com/1171145 SUSE Bug 1171145 https://www.suse.com/security/cve/CVE-2019-20386/ SUSE CVE CVE-2019-20386 page Container caasp/v4/nginx-ingress-controller:beta1 Container suse/sles12sp3:latest Container suse/sles12sp4:latest Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 libsystemd0-228-150.86.3 libudev1-228-150.86.3 systemd-228-150.86.3 systemd-sysvinit-228-150.86.3 udev-228-150.86.3 libsystemd0-32bit-228-150.86.3 libsystemd0-64bit-228-150.86.3 libsystemd0-mini-228-150.86.1 libudev-devel-228-150.86.3 libudev-mini-devel-228-150.86.1 libudev-mini1-228-150.86.1 libudev1-32bit-228-150.86.3 libudev1-64bit-228-150.86.3 nss-myhostname-228-150.86.3 nss-myhostname-32bit-228-150.86.3 nss-myhostname-64bit-228-150.86.3 nss-mymachines-228-150.86.3 systemd-32bit-228-150.86.3 systemd-64bit-228-150.86.3 systemd-bash-completion-228-150.86.3 systemd-devel-228-150.86.3 systemd-logger-228-150.86.3 systemd-mini-228-150.86.1 systemd-mini-bash-completion-228-150.86.1 systemd-mini-devel-228-150.86.1 systemd-mini-sysvinit-228-150.86.1 udev-mini-228-150.86.1 libsystemd0-228-150.86.3 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libudev1-228-150.86.3 as a component of Container caasp/v4/nginx-ingress-controller:beta1 systemd-228-150.86.3 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libsystemd0-228-150.86.3 as a component of Container suse/sles12sp3:latest libudev1-228-150.86.3 as a component of Container suse/sles12sp3:latest systemd-228-150.86.3 as a component of Container suse/sles12sp3:latest libsystemd0-228-150.86.3 as a component of Container suse/sles12sp4:latest libudev1-228-150.86.3 as a component of Container suse/sles12sp4:latest libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-Azure-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-Azure-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-Azure-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-Azure-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-Azure-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-EC2-HVM-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-EC2-HVM-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-EC2-HVM-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-EC2-HVM-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-EC2-HVM-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-GCE-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-GCE-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-GCE-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-GCE-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-GCE-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-OCI-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-OCI-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-OCI-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-OCI-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-OCI-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-GCE-BYOS libsystemd0-228-150.86.3 as a component of Image SLES12-SP4-SAP-OCI-BYOS libudev1-228-150.86.3 as a component of Image SLES12-SP4-SAP-OCI-BYOS systemd-228-150.86.3 as a component of Image SLES12-SP4-SAP-OCI-BYOS systemd-sysvinit-228-150.86.3 as a component of Image SLES12-SP4-SAP-OCI-BYOS udev-228-150.86.3 as a component of Image SLES12-SP4-SAP-OCI-BYOS libsystemd0-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 libsystemd0-32bit-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 libudev-devel-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 libudev1-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 libudev1-32bit-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-32bit-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-bash-completion-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-devel-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 systemd-sysvinit-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 udev-228-150.86.3 as a component of SUSE Linux Enterprise Server 12 SP4 libsystemd0-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsystemd0-32bit-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev-devel-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev1-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev1-32bit-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-32bit-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-bash-completion-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-devel-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-sysvinit-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 udev-228-150.86.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev-devel-228-150.86.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 systemd-devel-228-150.86.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur. CVE-2019-20386 Container caasp/v4/nginx-ingress-controller:beta1:libsystemd0-228-150.86.3 Container caasp/v4/nginx-ingress-controller:beta1:libudev1-228-150.86.3 Container caasp/v4/nginx-ingress-controller:beta1:systemd-228-150.86.3 Container suse/sles12sp3:latest:libsystemd0-228-150.86.3 Container suse/sles12sp3:latest:libudev1-228-150.86.3 Container suse/sles12sp3:latest:systemd-228-150.86.3 Container suse/sles12sp4:latest:libsystemd0-228-150.86.3 Container suse/sles12sp4:latest:libudev1-228-150.86.3 Image SLES12-SP4-Azure-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-Azure-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-Azure-BYOS:systemd-228-150.86.3 Image SLES12-SP4-Azure-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-Azure-BYOS:udev-228-150.86.3 Image SLES12-SP4-EC2-HVM-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-EC2-HVM-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-EC2-HVM-BYOS:systemd-228-150.86.3 Image SLES12-SP4-EC2-HVM-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-EC2-HVM-BYOS:udev-228-150.86.3 Image SLES12-SP4-GCE-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-GCE-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-GCE-BYOS:systemd-228-150.86.3 Image SLES12-SP4-GCE-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-GCE-BYOS:udev-228-150.86.3 Image SLES12-SP4-OCI-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-OCI-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-OCI-BYOS:systemd-228-150.86.3 Image SLES12-SP4-OCI-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-OCI-BYOS:udev-228-150.86.3 Image SLES12-SP4-SAP-Azure-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-Azure-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-SAP-Azure-BYOS:systemd-228-150.86.3 Image SLES12-SP4-SAP-Azure-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-Azure-BYOS:udev-228-150.86.3 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libudev1-228-150.86.3 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:systemd-228-150.86.3 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:udev-228-150.86.3 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libudev1-228-150.86.3 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:systemd-228-150.86.3 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:udev-228-150.86.3 Image SLES12-SP4-SAP-Azure:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-Azure:libudev1-228-150.86.3 Image SLES12-SP4-SAP-Azure:systemd-228-150.86.3 Image SLES12-SP4-SAP-Azure:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-Azure:udev-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM-BYOS:systemd-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM-BYOS:udev-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM:libudev1-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM:systemd-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-EC2-HVM:udev-228-150.86.3 Image SLES12-SP4-SAP-GCE-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-GCE-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-SAP-GCE-BYOS:systemd-228-150.86.3 Image SLES12-SP4-SAP-GCE-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-GCE-BYOS:udev-228-150.86.3 Image SLES12-SP4-SAP-GCE:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-GCE:libudev1-228-150.86.3 Image SLES12-SP4-SAP-GCE:systemd-228-150.86.3 Image SLES12-SP4-SAP-GCE:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-GCE:udev-228-150.86.3 Image SLES12-SP4-SAP-OCI-BYOS:libsystemd0-228-150.86.3 Image SLES12-SP4-SAP-OCI-BYOS:libudev1-228-150.86.3 Image SLES12-SP4-SAP-OCI-BYOS:systemd-228-150.86.3 Image SLES12-SP4-SAP-OCI-BYOS:systemd-sysvinit-228-150.86.3 Image SLES12-SP4-SAP-OCI-BYOS:udev-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:libsystemd0-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:libsystemd0-32bit-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:libudev-devel-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:libudev1-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:libudev1-32bit-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:systemd-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:systemd-32bit-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:systemd-bash-completion-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:systemd-devel-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:systemd-sysvinit-228-150.86.3 SUSE Linux Enterprise Server 12 SP4:udev-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-32bit-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev-devel-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-32bit-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-32bit-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-bash-completion-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-devel-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-sysvinit-228-150.86.3 SUSE Linux Enterprise Server for SAP Applications 12 SP4:udev-228-150.86.3 SUSE Linux Enterprise Software Development Kit 12 SP4:libudev-devel-228-150.86.3 SUSE Linux Enterprise Software Development Kit 12 SP4:systemd-devel-228-150.86.3 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201842-1/ https://www.suse.com/security/cve/CVE-2019-20386.html CVE-2019-20386 https://bugzilla.suse.com/1161436 SUSE Bug 1161436