Red Hat Security AdvisoryRHSA-2019:2091
systemd security, bug fix, and enhancement update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libgudev1-219-67.el7, systemd-219-67.el7, systemd-libs-219-67.el7 +2
- Red Hat Enterprise Linux Client Optional (v. 7) libgudev1-devel-219-67.el7, systemd-devel-219-67.el7, systemd-journal-gateway-219-67.el7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) libgudev1-219-67.el7, systemd-219-67.el7, systemd-libs-219-67.el7 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libgudev1-devel-219-67.el7, systemd-devel-219-67.el7, systemd-journal-gateway-219-67.el7 +2
- Red Hat Enterprise Linux Server (v. 7) libgudev1-219-67.el7, libgudev1-219-67.el7.ppc, libgudev1-devel-219-67.el7 +8
- Red Hat Enterprise Linux Server Optional (v. 7) systemd-journal-gateway-219-67.el7, systemd-networkd-219-67.el7, systemd-resolved-219-67.el7 +1
- Red Hat Enterprise Linux Workstation (v. 7) libgudev1-219-67.el7, libgudev1-devel-219-67.el7, systemd-219-67.el7 +4
- Red Hat Enterprise Linux Workstation Optional (v. 7) systemd-journal-gateway-219-67.el7, systemd-networkd-219-67.el7, systemd-resolved-219-67.el7
Fixes 3 records
Priority MEDIUM 40
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02261 · Published 2018-10-26 · Fixed CWE-502
Priority LOW 21
It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00295 · Published 2019-01-14 · Fixed CWE-250
Priority LOW 18
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.01051 · Published 2019-01-11 · Partial fix CWE-125
