Security update for systemd SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:1776-1 Final 1 1 2023-04-05T13:20:40Z current 2023-04-05T13:20:40Z 2023-04-05T13:20:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for systemd This update for systemd fixes the following issues: - CVE-2023-26604: Fixed a privilege escalation via the less pager. (bsc#1208958) - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). Bug fixes: - Restrict cpu rule to x86_64, and also update the rule files to make use of the 'CONST{arch}' syntax (bsc#1204423). - Fixed 'systemd --user' call pam_loginuid when creating user@.service (bsc#1198507). - Fixed 'systemd-detect-virt' refine hypervisor detection (bsc#1197244). - Fixed 'udev' 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529). - Fixed 'man' tweak description of auto/noauto (bsc#1191502). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles12sp4:latest-2023-1776,SUSE-2023-1776,SUSE-OpenStack-Cloud-9-2023-1776,SUSE-OpenStack-Cloud-Crowbar-9-2023-1776,SUSE-SLE-SAP-12-SP4-2023-1776,SUSE-SLE-SERVER-12-SP2-BCL-2023-1776,SUSE-SLE-SERVER-12-SP4-ESPOS-2023-1776,SUSE-SLE-SERVER-12-SP4-LTSS-2023-1776 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20231776-1/ Link for SUSE-SU-2023:1776-1 https://lists.suse.com/pipermail/sle-security-updates/2023-April/014389.html E-Mail link for SUSE-SU-2023:1776-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1191502 SUSE Bug 1191502 https://bugzilla.suse.com/1195529 SUSE Bug 1195529 https://bugzilla.suse.com/1197244 SUSE Bug 1197244 https://bugzilla.suse.com/1198507 SUSE Bug 1198507 https://bugzilla.suse.com/1204423 SUSE Bug 1204423 https://bugzilla.suse.com/1204968 SUSE Bug 1204968 https://bugzilla.suse.com/1205000 SUSE Bug 1205000 https://bugzilla.suse.com/1206985 SUSE Bug 1206985 https://bugzilla.suse.com/1208958 SUSE Bug 1208958 https://www.suse.com/security/cve/CVE-2022-3821/ SUSE CVE CVE-2022-3821 page https://www.suse.com/security/cve/CVE-2022-4415/ SUSE CVE CVE-2022-4415 page https://www.suse.com/security/cve/CVE-2023-26604/ SUSE CVE CVE-2023-26604 page Container suse/sles12sp4:latest SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libsystemd0-228-150.108.2 libudev1-228-150.108.2 libsystemd0-32bit-228-150.108.2 libsystemd0-64bit-228-150.108.2 libsystemd0-mini-228-150.108.1 libudev-devel-228-150.108.2 libudev-mini-devel-228-150.108.1 libudev-mini1-228-150.108.1 libudev1-32bit-228-150.108.2 libudev1-64bit-228-150.108.2 nss-myhostname-228-150.108.2 nss-myhostname-32bit-228-150.108.2 nss-myhostname-64bit-228-150.108.2 nss-mymachines-228-150.108.2 systemd-228-150.108.2 systemd-32bit-228-150.108.2 systemd-64bit-228-150.108.2 systemd-bash-completion-228-150.108.2 systemd-devel-228-150.108.2 systemd-logger-228-150.108.2 systemd-mini-228-150.108.1 systemd-mini-bash-completion-228-150.108.1 systemd-mini-devel-228-150.108.1 systemd-mini-sysvinit-228-150.108.1 systemd-sysvinit-228-150.108.2 udev-228-150.108.2 udev-mini-228-150.108.1 libsystemd0-228-150.108.2 as a component of Container suse/sles12sp4:latest libudev1-228-150.108.2 as a component of Container suse/sles12sp4:latest libsystemd0-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsystemd0-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libudev1-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libudev1-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-bash-completion-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL systemd-sysvinit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL udev-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libsystemd0-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libsystemd0-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libudev-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libudev1-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libudev1-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS systemd-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS systemd-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS systemd-bash-completion-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS systemd-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS systemd-sysvinit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS udev-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libsystemd0-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsystemd0-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libudev-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libudev1-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libudev1-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS systemd-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS systemd-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS systemd-bash-completion-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS systemd-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS systemd-sysvinit-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS udev-228-150.108.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libsystemd0-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsystemd0-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev1-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libudev1-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-32bit-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-bash-completion-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-devel-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 systemd-sysvinit-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 udev-228-150.108.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libsystemd0-228-150.108.2 as a component of SUSE OpenStack Cloud 9 libsystemd0-32bit-228-150.108.2 as a component of SUSE OpenStack Cloud 9 libudev-devel-228-150.108.2 as a component of SUSE OpenStack Cloud 9 libudev1-228-150.108.2 as a component of SUSE OpenStack Cloud 9 libudev1-32bit-228-150.108.2 as a component of SUSE OpenStack Cloud 9 systemd-228-150.108.2 as a component of SUSE OpenStack Cloud 9 systemd-32bit-228-150.108.2 as a component of SUSE OpenStack Cloud 9 systemd-bash-completion-228-150.108.2 as a component of SUSE OpenStack Cloud 9 systemd-devel-228-150.108.2 as a component of SUSE OpenStack Cloud 9 systemd-sysvinit-228-150.108.2 as a component of SUSE OpenStack Cloud 9 udev-228-150.108.2 as a component of SUSE OpenStack Cloud 9 libsystemd0-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 libsystemd0-32bit-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 libudev-devel-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 libudev1-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 libudev1-32bit-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 systemd-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 systemd-32bit-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 systemd-bash-completion-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 systemd-devel-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 systemd-sysvinit-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 udev-228-150.108.2 as a component of SUSE OpenStack Cloud Crowbar 9 An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service. CVE-2022-3821 Container suse/sles12sp4:latest:libsystemd0-228-150.108.2 Container suse/sles12sp4:latest:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:udev-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:udev-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:udev-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:udev-228-150.108.2 SUSE OpenStack Cloud 9:libsystemd0-228-150.108.2 SUSE OpenStack Cloud 9:libsystemd0-32bit-228-150.108.2 SUSE OpenStack Cloud 9:libudev-devel-228-150.108.2 SUSE OpenStack Cloud 9:libudev1-228-150.108.2 SUSE OpenStack Cloud 9:libudev1-32bit-228-150.108.2 SUSE OpenStack Cloud 9:systemd-228-150.108.2 SUSE OpenStack Cloud 9:systemd-32bit-228-150.108.2 SUSE OpenStack Cloud 9:systemd-bash-completion-228-150.108.2 SUSE OpenStack Cloud 9:systemd-devel-228-150.108.2 SUSE OpenStack Cloud 9:systemd-sysvinit-228-150.108.2 SUSE OpenStack Cloud 9:udev-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libsystemd0-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libsystemd0-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev-devel-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev1-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev1-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-bash-completion-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-devel-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-sysvinit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:udev-228-150.108.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231776-1/ https://www.suse.com/security/cve/CVE-2022-3821.html CVE-2022-3821 https://bugzilla.suse.com/1204968 SUSE Bug 1204968 A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting. CVE-2022-4415 Container suse/sles12sp4:latest:libsystemd0-228-150.108.2 Container suse/sles12sp4:latest:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:udev-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:udev-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:udev-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:udev-228-150.108.2 SUSE OpenStack Cloud 9:libsystemd0-228-150.108.2 SUSE OpenStack Cloud 9:libsystemd0-32bit-228-150.108.2 SUSE OpenStack Cloud 9:libudev-devel-228-150.108.2 SUSE OpenStack Cloud 9:libudev1-228-150.108.2 SUSE OpenStack Cloud 9:libudev1-32bit-228-150.108.2 SUSE OpenStack Cloud 9:systemd-228-150.108.2 SUSE OpenStack Cloud 9:systemd-32bit-228-150.108.2 SUSE OpenStack Cloud 9:systemd-bash-completion-228-150.108.2 SUSE OpenStack Cloud 9:systemd-devel-228-150.108.2 SUSE OpenStack Cloud 9:systemd-sysvinit-228-150.108.2 SUSE OpenStack Cloud 9:udev-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libsystemd0-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libsystemd0-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev-devel-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev1-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev1-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-bash-completion-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-devel-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-sysvinit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:udev-228-150.108.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231776-1/ https://www.suse.com/security/cve/CVE-2022-4415.html CVE-2022-4415 https://bugzilla.suse.com/1205000 SUSE Bug 1205000 systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output. CVE-2023-26604 Container suse/sles12sp4:latest:libsystemd0-228-150.108.2 Container suse/sles12sp4:latest:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP2-BCL:udev-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-ESPOS:udev-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev1-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server 12 SP4-LTSS:udev-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libsystemd0-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev-devel-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libudev1-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-32bit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-bash-completion-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-devel-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:systemd-sysvinit-228-150.108.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:udev-228-150.108.2 SUSE OpenStack Cloud 9:libsystemd0-228-150.108.2 SUSE OpenStack Cloud 9:libsystemd0-32bit-228-150.108.2 SUSE OpenStack Cloud 9:libudev-devel-228-150.108.2 SUSE OpenStack Cloud 9:libudev1-228-150.108.2 SUSE OpenStack Cloud 9:libudev1-32bit-228-150.108.2 SUSE OpenStack Cloud 9:systemd-228-150.108.2 SUSE OpenStack Cloud 9:systemd-32bit-228-150.108.2 SUSE OpenStack Cloud 9:systemd-bash-completion-228-150.108.2 SUSE OpenStack Cloud 9:systemd-devel-228-150.108.2 SUSE OpenStack Cloud 9:systemd-sysvinit-228-150.108.2 SUSE OpenStack Cloud 9:udev-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libsystemd0-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libsystemd0-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev-devel-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev1-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:libudev1-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-32bit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-bash-completion-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-devel-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:systemd-sysvinit-228-150.108.2 SUSE OpenStack Cloud Crowbar 9:udev-228-150.108.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20231776-1/ https://www.suse.com/security/cve/CVE-2023-26604.html CVE-2023-26604 https://bugzilla.suse.com/1208958 SUSE Bug 1208958 https://bugzilla.suse.com/1210451 SUSE Bug 1210451