opensuse-su-2019:0098-1
Vulnerability from csaf_opensuse
Published
2019-03-23 10:50
Modified
2019-03-23 10:50
Summary
Security update for systemd
Notes
Title of the patch
Security update for systemd
Description of the patch
This update for systemd provides the following fixes:
Security issues fixed:
- CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323)
- CVE-2018-16866: Fixed an information leak in journald (bsc#1120323)
- CVE-2018-6954: Fix mishandling of symlinks present in non-terminal path components (bsc#1080919)
- Fixed an issue during system startup in relation to encrypted swap disks (bsc#1119971)
Non-security issues fixed:
- pam_systemd: Fix 'Cannot create session: Already running in a session' (bsc#1111498)
- systemd-vconsole-setup: vconsole setup fails, fonts will not be copied to tty (bsc#1114933)
- systemd-tmpfiles-setup: symlinked /tmp to /var/tmp breaking multiple units (bsc#1045723)
- Fixed installation issue with /etc/machine-id during update (bsc#1117063)
- btrfs: qgroups are assigned to parent qgroups after reboot (bsc#1093753)
- logind: Stop managing VT switches if no sessions are registered on that VT. (bsc#1101591)
- udev: Downgrade message when settting inotify watch up fails. (bsc#1005023)
- udev: Ignore the exit code of systemd-detect-virt for memory hot-add. In SLE-12-SP3,
80-hotplug-cpu-mem.rules has a memory hot-add rule that uses systemd-detect-virt to
detect non-zvm environment. The systemd-detect-virt returns exit failure code when it
detected _none_ state. The exit failure code causes that the hot-add memory block can
not be set to online. (bsc#1076696)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2019-98
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for systemd", "title": "Title of the patch" }, { "category": "description", "text": "This update for systemd provides the following fixes:\n\nSecurity issues fixed:\n\n- CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323)\n- CVE-2018-16866: Fixed an information leak in journald (bsc#1120323)\n- CVE-2018-6954: Fix mishandling of symlinks present in non-terminal path components (bsc#1080919)\n- Fixed an issue during system startup in relation to encrypted swap disks (bsc#1119971)\n\nNon-security issues fixed:\n\n- pam_systemd: Fix \u0027Cannot create session: Already running in a session\u0027 (bsc#1111498)\n- systemd-vconsole-setup: vconsole setup fails, fonts will not be copied to tty (bsc#1114933)\n- systemd-tmpfiles-setup: symlinked /tmp to /var/tmp breaking multiple units (bsc#1045723)\n- Fixed installation issue with /etc/machine-id during update (bsc#1117063)\n- btrfs: qgroups are assigned to parent qgroups after reboot (bsc#1093753)\n- logind: Stop managing VT switches if no sessions are registered on that VT. (bsc#1101591)\n- udev: Downgrade message when settting inotify watch up fails. (bsc#1005023)\n- udev: Ignore the exit code of systemd-detect-virt for memory hot-add. In SLE-12-SP3,\n 80-hotplug-cpu-mem.rules has a memory hot-add rule that uses systemd-detect-virt to\n detect non-zvm environment. The systemd-detect-virt returns exit failure code when it\n detected _none_ state. The exit failure code causes that the hot-add memory block can\n not be set to online. (bsc#1076696)\n \nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2019-98", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2019_0098-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2019:0098-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KDEM25CHZWMRDGDYZ23LBZGMPWA63D2Y/#KDEM25CHZWMRDGDYZ23LBZGMPWA63D2Y" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2019:0098-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KDEM25CHZWMRDGDYZ23LBZGMPWA63D2Y/#KDEM25CHZWMRDGDYZ23LBZGMPWA63D2Y" }, { "category": "self", "summary": "SUSE Bug 1005023", "url": "https://bugzilla.suse.com/1005023" }, { "category": "self", "summary": "SUSE Bug 1045723", "url": "https://bugzilla.suse.com/1045723" }, { "category": "self", "summary": "SUSE Bug 1076696", "url": "https://bugzilla.suse.com/1076696" }, { "category": "self", "summary": "SUSE Bug 1080919", "url": "https://bugzilla.suse.com/1080919" }, { "category": "self", "summary": "SUSE Bug 1093753", "url": "https://bugzilla.suse.com/1093753" }, { "category": "self", "summary": "SUSE Bug 1101591", "url": "https://bugzilla.suse.com/1101591" }, { "category": "self", "summary": "SUSE Bug 1111498", "url": "https://bugzilla.suse.com/1111498" }, { "category": "self", "summary": "SUSE Bug 1114933", "url": "https://bugzilla.suse.com/1114933" }, { "category": "self", "summary": "SUSE Bug 1117063", "url": "https://bugzilla.suse.com/1117063" }, { "category": "self", "summary": "SUSE Bug 1119971", "url": "https://bugzilla.suse.com/1119971" }, { "category": "self", "summary": "SUSE Bug 1120323", "url": "https://bugzilla.suse.com/1120323" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16864 page", "url": "https://www.suse.com/security/cve/CVE-2018-16864/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16865 page", "url": "https://www.suse.com/security/cve/CVE-2018-16865/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-16866 page", "url": "https://www.suse.com/security/cve/CVE-2018-16866/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-6954 page", "url": "https://www.suse.com/security/cve/CVE-2018-6954/" } ], "title": "Security update for systemd", "tracking": { "current_release_date": "2019-03-23T10:50:44Z", "generator": { "date": "2019-03-23T10:50:44Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2019:0098-1", "initial_release_date": "2019-03-23T10:50:44Z", "revision_history": [ { "date": "2019-03-23T10:50:44Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libsystemd0-234-lp150.20.12.1.i586", "product": { "name": "libsystemd0-234-lp150.20.12.1.i586", "product_id": "libsystemd0-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "libsystemd0-mini-234-lp150.20.12.1.i586", "product": { "name": "libsystemd0-mini-234-lp150.20.12.1.i586", "product_id": "libsystemd0-mini-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "libudev-devel-234-lp150.20.12.1.i586", "product": { "name": "libudev-devel-234-lp150.20.12.1.i586", "product_id": "libudev-devel-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "libudev-mini-devel-234-lp150.20.12.1.i586", "product": { "name": "libudev-mini-devel-234-lp150.20.12.1.i586", "product_id": "libudev-mini-devel-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "libudev-mini1-234-lp150.20.12.1.i586", "product": { "name": "libudev-mini1-234-lp150.20.12.1.i586", "product_id": "libudev-mini1-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "libudev1-234-lp150.20.12.1.i586", "product": { "name": "libudev1-234-lp150.20.12.1.i586", "product_id": "libudev1-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "nss-myhostname-234-lp150.20.12.1.i586", "product": { "name": "nss-myhostname-234-lp150.20.12.1.i586", "product_id": "nss-myhostname-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "nss-mymachines-234-lp150.20.12.1.i586", "product": { "name": "nss-mymachines-234-lp150.20.12.1.i586", "product_id": "nss-mymachines-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "nss-systemd-234-lp150.20.12.1.i586", "product": { "name": "nss-systemd-234-lp150.20.12.1.i586", "product_id": "nss-systemd-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-234-lp150.20.12.1.i586", "product": { "name": "systemd-234-lp150.20.12.1.i586", "product_id": "systemd-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-container-234-lp150.20.12.1.i586", "product": { "name": "systemd-container-234-lp150.20.12.1.i586", "product_id": "systemd-container-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-coredump-234-lp150.20.12.1.i586", "product": { "name": "systemd-coredump-234-lp150.20.12.1.i586", "product_id": "systemd-coredump-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-devel-234-lp150.20.12.1.i586", "product": { "name": "systemd-devel-234-lp150.20.12.1.i586", "product_id": "systemd-devel-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-logger-234-lp150.20.12.1.i586", "product": { "name": "systemd-logger-234-lp150.20.12.1.i586", "product_id": "systemd-logger-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-mini-234-lp150.20.12.1.i586", "product": { "name": "systemd-mini-234-lp150.20.12.1.i586", "product_id": "systemd-mini-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-mini-container-mini-234-lp150.20.12.1.i586", "product": { "name": "systemd-mini-container-mini-234-lp150.20.12.1.i586", "product_id": "systemd-mini-container-mini-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "product": { "name": "systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "product_id": "systemd-mini-coredump-mini-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-mini-devel-234-lp150.20.12.1.i586", "product": { "name": "systemd-mini-devel-234-lp150.20.12.1.i586", "product_id": "systemd-mini-devel-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-mini-sysvinit-234-lp150.20.12.1.i586", "product": { "name": "systemd-mini-sysvinit-234-lp150.20.12.1.i586", "product_id": "systemd-mini-sysvinit-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "systemd-sysvinit-234-lp150.20.12.1.i586", "product": { "name": "systemd-sysvinit-234-lp150.20.12.1.i586", "product_id": "systemd-sysvinit-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "udev-234-lp150.20.12.1.i586", "product": { "name": "udev-234-lp150.20.12.1.i586", "product_id": "udev-234-lp150.20.12.1.i586" } }, { "category": "product_version", "name": "udev-mini-234-lp150.20.12.1.i586", "product": { "name": "udev-mini-234-lp150.20.12.1.i586", "product_id": "udev-mini-234-lp150.20.12.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "systemd-bash-completion-234-lp150.20.12.1.noarch", "product": { "name": "systemd-bash-completion-234-lp150.20.12.1.noarch", "product_id": "systemd-bash-completion-234-lp150.20.12.1.noarch" } }, { "category": "product_version", "name": "systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "product": { "name": "systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "product_id": "systemd-mini-bash-completion-234-lp150.20.12.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "libsystemd0-234-lp150.20.12.1.x86_64", "product": { "name": "libsystemd0-234-lp150.20.12.1.x86_64", "product_id": "libsystemd0-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libsystemd0-32bit-234-lp150.20.12.1.x86_64", "product": { "name": "libsystemd0-32bit-234-lp150.20.12.1.x86_64", "product_id": "libsystemd0-32bit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libsystemd0-mini-234-lp150.20.12.1.x86_64", "product": { "name": "libsystemd0-mini-234-lp150.20.12.1.x86_64", "product_id": "libsystemd0-mini-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libudev-devel-234-lp150.20.12.1.x86_64", "product": { "name": "libudev-devel-234-lp150.20.12.1.x86_64", "product_id": "libudev-devel-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libudev-devel-32bit-234-lp150.20.12.1.x86_64", "product": { "name": "libudev-devel-32bit-234-lp150.20.12.1.x86_64", "product_id": "libudev-devel-32bit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libudev-mini-devel-234-lp150.20.12.1.x86_64", "product": { "name": "libudev-mini-devel-234-lp150.20.12.1.x86_64", "product_id": "libudev-mini-devel-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libudev-mini1-234-lp150.20.12.1.x86_64", "product": { "name": "libudev-mini1-234-lp150.20.12.1.x86_64", "product_id": "libudev-mini1-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libudev1-234-lp150.20.12.1.x86_64", "product": { "name": "libudev1-234-lp150.20.12.1.x86_64", "product_id": "libudev1-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "libudev1-32bit-234-lp150.20.12.1.x86_64", "product": { "name": "libudev1-32bit-234-lp150.20.12.1.x86_64", "product_id": "libudev1-32bit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "nss-myhostname-234-lp150.20.12.1.x86_64", "product": { "name": "nss-myhostname-234-lp150.20.12.1.x86_64", "product_id": "nss-myhostname-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "product": { "name": "nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "product_id": "nss-myhostname-32bit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "nss-mymachines-234-lp150.20.12.1.x86_64", "product": { "name": "nss-mymachines-234-lp150.20.12.1.x86_64", "product_id": "nss-mymachines-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "product": { "name": "nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "product_id": "nss-mymachines-32bit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "nss-systemd-234-lp150.20.12.1.x86_64", "product": { "name": "nss-systemd-234-lp150.20.12.1.x86_64", "product_id": "nss-systemd-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-234-lp150.20.12.1.x86_64", "product_id": "systemd-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-32bit-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-32bit-234-lp150.20.12.1.x86_64", "product_id": "systemd-32bit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-container-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-container-234-lp150.20.12.1.x86_64", "product_id": "systemd-container-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-coredump-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-coredump-234-lp150.20.12.1.x86_64", "product_id": "systemd-coredump-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-devel-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-devel-234-lp150.20.12.1.x86_64", "product_id": "systemd-devel-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-logger-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-logger-234-lp150.20.12.1.x86_64", "product_id": "systemd-logger-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-mini-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-mini-234-lp150.20.12.1.x86_64", "product_id": "systemd-mini-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "product_id": "systemd-mini-container-mini-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "product_id": "systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-mini-devel-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-mini-devel-234-lp150.20.12.1.x86_64", "product_id": "systemd-mini-devel-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "product_id": "systemd-mini-sysvinit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "systemd-sysvinit-234-lp150.20.12.1.x86_64", "product": { "name": "systemd-sysvinit-234-lp150.20.12.1.x86_64", "product_id": "systemd-sysvinit-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "udev-234-lp150.20.12.1.x86_64", "product": { "name": "udev-234-lp150.20.12.1.x86_64", "product_id": "udev-234-lp150.20.12.1.x86_64" } }, { "category": "product_version", "name": "udev-mini-234-lp150.20.12.1.x86_64", "product": { "name": "udev-mini-234-lp150.20.12.1.x86_64", "product_id": "udev-mini-234-lp150.20.12.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.0", "product": { "name": "openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.0" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586" }, "product_reference": "libsystemd0-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64" }, "product_reference": "libsystemd0-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-32bit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64" }, "product_reference": "libsystemd0-32bit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-mini-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586" }, "product_reference": "libsystemd0-mini-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-mini-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64" }, "product_reference": "libsystemd0-mini-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-devel-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586" }, "product_reference": "libudev-devel-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-devel-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64" }, "product_reference": "libudev-devel-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-devel-32bit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64" }, "product_reference": "libudev-devel-32bit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-mini-devel-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586" }, "product_reference": "libudev-mini-devel-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-mini-devel-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64" }, "product_reference": "libudev-mini-devel-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-mini1-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586" }, "product_reference": "libudev-mini1-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-mini1-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64" }, "product_reference": "libudev-mini1-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev1-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586" }, "product_reference": "libudev1-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev1-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64" }, "product_reference": "libudev1-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "libudev1-32bit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64" }, "product_reference": "libudev1-32bit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-myhostname-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586" }, "product_reference": "nss-myhostname-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-myhostname-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64" }, "product_reference": "nss-myhostname-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-myhostname-32bit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64" }, "product_reference": "nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-mymachines-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586" }, "product_reference": "nss-mymachines-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-mymachines-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64" }, "product_reference": "nss-mymachines-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-mymachines-32bit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64" }, "product_reference": "nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-systemd-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586" }, "product_reference": "nss-systemd-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "nss-systemd-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64" }, "product_reference": "nss-systemd-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586" }, "product_reference": "systemd-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-32bit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-32bit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-bash-completion-234-lp150.20.12.1.noarch as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch" }, "product_reference": "systemd-bash-completion-234-lp150.20.12.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586" }, "product_reference": "systemd-container-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-container-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-coredump-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586" }, "product_reference": "systemd-coredump-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-coredump-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-coredump-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-devel-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586" }, "product_reference": "systemd-devel-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-devel-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-devel-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-logger-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586" }, "product_reference": "systemd-logger-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-logger-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-logger-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586" }, "product_reference": "systemd-mini-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-mini-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-bash-completion-234-lp150.20.12.1.noarch as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch" }, "product_reference": "systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-container-mini-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586" }, "product_reference": "systemd-mini-container-mini-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-container-mini-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-coredump-mini-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586" }, "product_reference": "systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-devel-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586" }, "product_reference": "systemd-mini-devel-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-devel-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-mini-devel-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-sysvinit-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586" }, "product_reference": "systemd-mini-sysvinit-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-mini-sysvinit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-sysvinit-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586" }, "product_reference": "systemd-sysvinit-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-sysvinit-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64" }, "product_reference": "systemd-sysvinit-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "udev-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586" }, "product_reference": "udev-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "udev-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64" }, "product_reference": "udev-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "udev-mini-234-lp150.20.12.1.i586 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586" }, "product_reference": "udev-mini-234-lp150.20.12.1.i586", "relates_to_product_reference": "openSUSE Leap 15.0" }, { "category": "default_component_of", "full_product_name": { "name": "udev-mini-234-lp150.20.12.1.x86_64 as component of openSUSE Leap 15.0", "product_id": "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" }, "product_reference": "udev-mini-234-lp150.20.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-16864", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16864" } ], "notes": [ { "category": "general", "text": "An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16864", "url": "https://www.suse.com/security/cve/CVE-2018-16864" }, { "category": "external", "summary": "SUSE Bug 1108912 for CVE-2018-16864", "url": "https://bugzilla.suse.com/1108912" }, { "category": "external", "summary": "SUSE Bug 1120323 for CVE-2018-16864", "url": "https://bugzilla.suse.com/1120323" }, { "category": "external", "summary": "SUSE Bug 1122265 for CVE-2018-16864", "url": "https://bugzilla.suse.com/1122265" }, { "category": "external", "summary": "SUSE Bug 1188063 for CVE-2018-16864", "url": "https://bugzilla.suse.com/1188063" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.0" }, "products": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-03-23T10:50:44Z", "details": "important" } ], "title": "CVE-2018-16864" }, { "cve": "CVE-2018-16865", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16865" } ], "notes": [ { "category": "general", "text": "An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16865", "url": "https://www.suse.com/security/cve/CVE-2018-16865" }, { "category": "external", "summary": "SUSE Bug 1108912 for CVE-2018-16865", "url": "https://bugzilla.suse.com/1108912" }, { "category": "external", "summary": "SUSE Bug 1120323 for CVE-2018-16865", "url": "https://bugzilla.suse.com/1120323" }, { "category": "external", "summary": "SUSE Bug 1122265 for CVE-2018-16865", "url": "https://bugzilla.suse.com/1122265" }, { "category": "external", "summary": "SUSE Bug 1188063 for CVE-2018-16865", "url": "https://bugzilla.suse.com/1188063" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-03-23T10:50:44Z", "details": "important" } ], "title": "CVE-2018-16865" }, { "cve": "CVE-2018-16866", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-16866" } ], "notes": [ { "category": "general", "text": "An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon \u0027:\u0027. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-16866", "url": "https://www.suse.com/security/cve/CVE-2018-16866" }, { "category": "external", "summary": "SUSE Bug 1108912 for CVE-2018-16866", "url": "https://bugzilla.suse.com/1108912" }, { "category": "external", "summary": "SUSE Bug 1120323 for CVE-2018-16866", "url": "https://bugzilla.suse.com/1120323" }, { "category": "external", "summary": "SUSE Bug 1122265 for CVE-2018-16866", "url": "https://bugzilla.suse.com/1122265" }, { "category": "external", "summary": "SUSE Bug 1126183 for CVE-2018-16866", "url": "https://bugzilla.suse.com/1126183" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-03-23T10:50:44Z", "details": "low" } ], "title": "CVE-2018-16866" }, { "cve": "CVE-2018-6954", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-6954" } ], "notes": [ { "category": "general", "text": "systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-6954", "url": "https://www.suse.com/security/cve/CVE-2018-6954" }, { "category": "external", "summary": "SUSE Bug 1080919 for CVE-2018-6954", "url": "https://bugzilla.suse.com/1080919" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libsystemd0-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-devel-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev-mini1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:libudev1-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:libudev1-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-myhostname-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-myhostname-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-mymachines-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-mymachines-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:nss-systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-32bit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-container-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-coredump-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-logger-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-bash-completion-234-lp150.20.12.1.noarch", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-container-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-coredump-mini-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-devel-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-mini-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:systemd-sysvinit-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-234-lp150.20.12.1.x86_64", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.i586", "openSUSE Leap 15.0:udev-mini-234-lp150.20.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2019-03-23T10:50:44Z", "details": "important" } ], "title": "CVE-2018-6954" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…