{"affected":[{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 7","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libudev-devel":"228-150.63.1","systemd-devel":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libudev-devel":"228-150.63.1","systemd-devel":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.63.1","libsystemd0-32bit":"228-150.63.1","libudev1":"228-150.63.1","libudev1-32bit":"228-150.63.1","systemd":"228-150.63.1","systemd-32bit":"228-150.63.1","systemd-bash-completion":"228-150.63.1","systemd-sysvinit":"228-150.63.1","udev":"228-150.63.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 4","name":"systemd","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Enterprise%20Storage%204"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"228-150.63.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for systemd fixes the following issues:\n\nSecurity vulnerability fixed:\n\n- CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS\n  message on the system bus by an unprivileged user (bsc#1125352)\n\nOther bug fixes and changes:\n\n- journal-remote: set a limit on the number of fields in a message\n- journal-remote: verify entry length from header\n- journald: set a limit on the number of fields (1k)\n- journald: do not store the iovec entry for process commandline on stack\n- core: include Found state in device dumps\n- device: fix serialization and deserialization of DeviceFound\n- fix path in btrfs rule (#6844)\n- assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025)\n- Update systemd-system.conf.xml (bsc#1122000)\n- units: inform user that the default target is started after exiting from rescue or emergency mode\n- manager: don't skip sigchld handler for main and control pid for services (#3738)\n- core: Add helper functions unit_{main, control}_pid\n- manager: Fixing a debug printf formatting mistake (#3640)\n- manager: Only invoke a single sigchld per unit within a cleanup cycle (bsc#1117382)\n- core: update invoke_sigchld_event() to handle NULL ->sigchld_event()\n- sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#3631)\n- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (bsc#1122344)\n- core: when restarting services, don't close fds\n- cryptsetup: Add dependency on loopback setup to generated units\n- journal-gateway: use localStorage['cursor'] only when it has valid value\n- journal-gateway: explicitly declare local variables\n- analyze: actually select longest activated-time of services\n- sd-bus: fix implicit downcast of bitfield reported by LGTM\n- core: free lines after reading them (bsc#1123892)\n- pam_systemd: reword message about not creating a session (bsc#1111498)\n- pam_systemd: suppress LOG_DEBUG log messages if debugging is off (bsc#1111498)\n- main: improve RLIMIT_NOFILE handling (#5795) (bsc#1120658)\n- sd-bus: if we receive an invalid dbus message, ignore and proceeed\n- automount: don't pass non-blocking pipe to kernel.\n- units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)\n- units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333)\n","id":"SUSE-SU-2019:0428-1","modified":"2019-02-19T10:00:42Z","published":"2019-02-19T10:00:42Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190428-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1111498"},{"type":"REPORT","url":"https://bugzilla.suse.com/1117025"},{"type":"REPORT","url":"https://bugzilla.suse.com/1117382"},{"type":"REPORT","url":"https://bugzilla.suse.com/1120658"},{"type":"REPORT","url":"https://bugzilla.suse.com/1122000"},{"type":"REPORT","url":"https://bugzilla.suse.com/1122344"},{"type":"REPORT","url":"https://bugzilla.suse.com/1123333"},{"type":"REPORT","url":"https://bugzilla.suse.com/1123892"},{"type":"REPORT","url":"https://bugzilla.suse.com/1125352"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-6454"}],"related":["CVE-2019-6454"],"summary":"Security update for systemd","upstream":["CVE-2019-6454"]}