{"id":"SUSE-SU-2020:0353-1","summary":"Security update for systemd","details":"This update for systemd provides the following fixes:\n\n- CVE-2020-1712 (bsc#bsc#1162108)\n  Fix a heap use-after-free vulnerability, when asynchronous\n  Polkit queries were performed while handling Dbus messages. A local\n  unprivileged attacker could have abused this flaw to crash systemd services or\n  potentially execute code and elevate their privileges, by sending specially\n  crafted Dbus messages.\n- sd-bus: Deal with cookie overruns. (bsc#1150595)\n- rules: Add by-id symlinks for persistent memory. (bsc#1140631)\n- Drop the old fds used for logging and reopen them in the sub process before doing any\n  new logging. (bsc#1154948)\n- Fix warnings thrown during package installation (bsc#1154043)\n- Fix for systemctl hanging by restart. (bsc#1139459)\n- man: mention that alias names are only effective after 'systemctl enable'. (bsc#1151377)\n- ask-password: improve log message when inotify limit is reached. (bsc#1155574)\n- udevd: wait for workers to finish when exiting. (bsc#1106383)\n- core: fragments of masked units ought not be considered for NeedDaemonReload. (bsc#1156482)\n- udev: fix 'NULL' deref when executing rules. (bsc#1151506)\n- Introduce function for reading virtual files in 'sysfs' and 'procfs'. (bsc#1133495, bsc#1159814)\n","modified":"2026-03-11T07:13:36.577311Z","published":"2020-02-06T16:34:47Z","related":["CVE-2020-1712"],"upstream":["CVE-2020-1712"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200353-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1106383"},{"type":"REPORT","url":"https://bugzilla.suse.com/1127557"},{"type":"REPORT","url":"https://bugzilla.suse.com/1133495"},{"type":"REPORT","url":"https://bugzilla.suse.com/1139459"},{"type":"REPORT","url":"https://bugzilla.suse.com/1140631"},{"type":"REPORT","url":"https://bugzilla.suse.com/1150595"},{"type":"REPORT","url":"https://bugzilla.suse.com/1151377"},{"type":"REPORT","url":"https://bugzilla.suse.com/1151506"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154043"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154948"},{"type":"REPORT","url":"https://bugzilla.suse.com/1155574"},{"type":"REPORT","url":"https://bugzilla.suse.com/1156482"},{"type":"REPORT","url":"https://bugzilla.suse.com/1159814"},{"type":"REPORT","url":"https://bugzilla.suse.com/1162108"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-1712"}],"affected":[{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.9.1"}]}],"ecosystem_specific":{"binaries":[{"libudev-devel":"228-157.9.1","systemd-devel":"228-157.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0353-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.9.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0-32bit":"228-157.9.1","systemd-32bit":"228-157.9.1","systemd-bash-completion":"228-157.9.1","systemd":"228-157.9.1","libsystemd0":"228-157.9.1","libudev1-32bit":"228-157.9.1","libudev1":"228-157.9.1","systemd-sysvinit":"228-157.9.1","udev":"228-157.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0353-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.9.1"}]}],"ecosystem_specific":{"binaries":[{"libudev1":"228-157.9.1","systemd-32bit":"228-157.9.1","systemd-bash-completion":"228-157.9.1","systemd-sysvinit":"228-157.9.1","systemd":"228-157.9.1","libsystemd0-32bit":"228-157.9.1","libsystemd0":"228-157.9.1","libudev1-32bit":"228-157.9.1","udev":"228-157.9.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0353-1.json"}}],"schema_version":"1.7.5"}