{"id":"SUSE-SU-2023:0058-1","summary":"Security update for systemd","details":"This update for systemd fixes the following issues:\n\nFixing the following issues:\n\n- units: restore RemainAfterExit=yes in systemd-vconsole-setup.service\n- vconsole-setup: don't concat strv if we don't need to (i.e. not in debug log mode)\n- vconsole-setup: add more log messages\n- units: restore Before dependencies for systemd-vconsole-setup.service\n- vconsole-setup: add lots of debug messages\n- Add enable_disable() helper\n- vconsole: correct kernel command line namespace\n- vconsole: Don't do static installation under sysinit.target\n- vconsole: use KD_FONT_OP_GET/SET to handle copying (bsc#1181636)\n- vconsole: updates of keyboard/font loading functions\n- vconsole: Add generic is_*() functions\n- vconsole: add two new toggle functions, remove old enable/disable ones\n- vconsole: copy font to 63 consoles instead of 15\n- vconsole: add log_oom() where appropriate\n- vconsole-setup: Store fonts on heap (#3268)\n- errno-util: add new errno_or_else() helper\n\nThe following fix is now integrated upstream:\n\n- CVE-2022-4415: coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000).\n","modified":"2026-03-11T07:21:59.012106Z","published":"2023-01-10T08:15:43Z","related":["CVE-2022-4415"],"upstream":["CVE-2022-4415"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230058-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181636"},{"type":"REPORT","url":"https://bugzilla.suse.com/1205000"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-4415"}],"affected":[{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.49.1"}]}],"ecosystem_specific":{"binaries":[{"libudev-devel":"228-157.49.1","systemd-devel":"228-157.49.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0058-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.49.1"}]}],"ecosystem_specific":{"binaries":[{"systemd-devel":"228-157.49.1","libsystemd0":"228-157.49.1","systemd-32bit":"228-157.49.1","systemd-sysvinit":"228-157.49.1","systemd":"228-157.49.1","udev":"228-157.49.1","libsystemd0-32bit":"228-157.49.1","libudev-devel":"228-157.49.1","libudev1-32bit":"228-157.49.1","libudev1":"228-157.49.1","systemd-bash-completion":"228-157.49.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0058-1.json"}},{"package":{"name":"systemd","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","purl":"pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.49.1"}]}],"ecosystem_specific":{"binaries":[{"libsystemd0-32bit":"228-157.49.1","libudev1-32bit":"228-157.49.1","udev":"228-157.49.1","libsystemd0":"228-157.49.1","libudev-devel":"228-157.49.1","libudev1":"228-157.49.1","systemd-32bit":"228-157.49.1","systemd-bash-completion":"228-157.49.1","systemd-devel":"228-157.49.1","systemd-sysvinit":"228-157.49.1","systemd":"228-157.49.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:0058-1.json"}}],"schema_version":"1.7.5"}