{"affected":[{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 7","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libudev-devel":"228-150.58.1","systemd-devel":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libudev-devel":"228-150.58.1","systemd-devel":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.58.1","libsystemd0-32bit":"228-150.58.1","libudev1":"228-150.58.1","libudev1-32bit":"228-150.58.1","systemd":"228-150.58.1","systemd-32bit":"228-150.58.1","systemd-bash-completion":"228-150.58.1","systemd-sysvinit":"228-150.58.1","udev":"228-150.58.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.58.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for systemd provides the following fixes:\n\nSecurity issues fixed:\n\n- CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323)\n- CVE-2018-16866: Fixed an information leak in journald (bsc#1120323)\n- Fixed an issue during system startup in relation to encrypted swap disks (bsc#1119971)\n\nNon-security issues fixed:\n\n- core: Queue loading transient units after setting their properties. (bsc#1115518)\n- logind: Stop managing VT switches if no sessions are registered on that VT. (bsc#1101591)\n- terminal-util: introduce vt_release() and vt_restore() helpers.\n- terminal: Unify code for resetting kbd utf8 mode a bit.\n- terminal Reset should honour default_utf8 kernel setting.\n- logind: Make session_restore_vt() static.\n- udev: Downgrade message when settting inotify watch up fails. (bsc#1005023)\n- log: Never log into foreign fd #2 in PID 1 or its pre-execve() children. (bsc#1114981)\n- udev: Ignore the exit code of systemd-detect-virt for memory hot-add.  In SLE-12-SP3,\n  80-hotplug-cpu-mem.rules has a memory hot-add rule that uses systemd-detect-virt to\n  detect non-zvm environment. The systemd-detect-virt returns exit failure code when it\n  detected _none_ state.  The exit failure code causes that the hot-add memory block can\n  not be set to online. (bsc#1076696)\n","id":"SUSE-SU-2019:0135-1","modified":"2019-01-21T12:54:40Z","published":"2019-01-21T12:54:40Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190135-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1005023"},{"type":"REPORT","url":"https://bugzilla.suse.com/1076696"},{"type":"REPORT","url":"https://bugzilla.suse.com/1101591"},{"type":"REPORT","url":"https://bugzilla.suse.com/1114981"},{"type":"REPORT","url":"https://bugzilla.suse.com/1115518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1119971"},{"type":"REPORT","url":"https://bugzilla.suse.com/1120323"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16864"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16865"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16866"}],"related":["CVE-2018-16864","CVE-2018-16865","CVE-2018-16866"],"summary":"Security update for systemd","upstream":["CVE-2018-16864","CVE-2018-16865","CVE-2018-16866"]}