{"id":"SUSE-SU-2020:0331-1","summary":"Security update for systemd","details":"This update for systemd fixes the following issues:\n\n- CVE-2020-1712 (bsc#bsc#1162108)\n  Fix a heap use-after-free vulnerability, when asynchronous\n  Polkit queries were performed while handling Dbus messages. A local\n  unprivileged attacker could have abused this flaw to crash systemd services or\n  potentially execute code and elevate their privileges, by sending specially\n  crafted Dbus messages.\n\n- Unconfirmed fix for prevent hanging of systemctl during restart. (bsc#1139459)\n- Fix warnings thrown during package installation. (bsc#1154043)\n- Fix for system-udevd prevent crash within OES2018. (bsc#1151506)\n- Fragments of masked units ought not be considered for 'NeedDaemonReload'. (bsc#1156482)\n- Wait for workers to finish when exiting. (bsc#1106383)\n- Improve log message when inotify limit is reached. (bsc#1155574)\n- Mention in the man pages that alias names are only effective after command 'systemctl enable'. (bsc#1151377)\n- Introduce function for reading virtual files in 'sysfs' and 'procfs'. (bsc#1133495, bsc#1159814)\n","modified":"2026-03-11T07:13:36.024150Z","published":"2020-03-18T11:53:17Z","related":["CVE-2020-1712"],"upstream":["CVE-2020-1712"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200331-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1106383"},{"type":"REPORT","url":"https://bugzilla.suse.com/1133495"},{"type":"REPORT","url":"https://bugzilla.suse.com/1139459"},{"type":"REPORT","url":"https://bugzilla.suse.com/1151377"},{"type":"REPORT","url":"https://bugzilla.suse.com/1151506"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154043"},{"type":"REPORT","url":"https://bugzilla.suse.com/1155574"},{"type":"REPORT","url":"https://bugzilla.suse.com/1156482"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159814"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162108"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-1712"}],"affected":[{"package":{"name":"systemd","ecosystem":"SUSE:HPE Helion OpenStack 8","purl":"pkg:rpm/suse/systemd&distro=HPE%20Helion%20OpenStack%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libudev-devel":"228-150.82.1","libudev1":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd":"228-150.82.1","udev":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-sysvinit":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:OpenStack Cloud 7","purl":"pkg:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%207"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd":"228-150.82.1","udev":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-sysvinit":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:OpenStack Cloud 8","purl":"pkg:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"udev":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-sysvinit":"228-150.82.1","systemd":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","purl":"pkg:rpm/suse/systemd&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"udev":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1-32bit":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","systemd":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"udev":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libudev1":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd":"228-150.82.1","libsystemd0":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-sysvinit":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"systemd-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","udev":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1":"228-150.82.1","systemd":"228-150.82.1","libudev1-32bit":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","udev":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libudev-devel":"228-150.82.1","systemd-devel":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"systemd":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","udev":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-sysvinit":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","udev":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","systemd":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","udev":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0":"228-150.82.1","libudev1-32bit":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","udev":"228-150.82.1","libsystemd0-32bit":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"udev":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1-32bit":"228-150.82.1","libudev1":"228-150.82.1","systemd-32bit":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","systemd":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"systemd-bash-completion":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","libudev1-32bit":"228-150.82.1","systemd-32bit":"228-150.82.1","systemd-sysvinit":"228-150.82.1","systemd":"228-150.82.1","udev":"228-150.82.1","libudev1":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Enterprise Storage 5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Enterprise%20Storage%205"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.82.1"}]}],"ecosystem_specific":{"binaries":[{"systemd-32bit":"228-150.82.1","udev":"228-150.82.1","libsystemd0":"228-150.82.1","libudev-devel":"228-150.82.1","systemd-bash-completion":"228-150.82.1","systemd-sysvinit":"228-150.82.1","systemd":"228-150.82.1","libsystemd0-32bit":"228-150.82.1","libudev1-32bit":"228-150.82.1","libudev1":"228-150.82.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0331-1.json"}}],"schema_version":"1.7.5"}