Red Hat Security AdvisoryRHSA-2019:3222
systemd security and bug fix update
Released 2019-10-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) libgudev1-219-62.el7_6.11, systemd-219-62.el7_6.11, systemd-libs-219-62.el7_6.11 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) libgudev1-devel-219-62.el7_6.11, systemd-devel-219-62.el7_6.11, systemd-journal-gateway-219-62.el7_6.11 +2
- Red Hat Enterprise Linux Server EUS (v. 7.6) libgudev1-219-62.el7_6.11, libgudev1-219-62.el7_6.11.ppc, libgudev1-devel-219-62.el7_6.11 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) systemd-journal-gateway-219-62.el7_6.11, systemd-networkd-219-62.el7_6.11, systemd-resolved-219-62.el7_6.11 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libgudev1-219-62.el7_6.11, libgudev1-devel-219-62.el7_6.11, systemd-219-62.el7_6.11 +4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) systemd-journal-gateway-219-62.el7_6.11, systemd-networkd-219-62.el7_6.11, systemd-resolved-219-62.el7_6.11
Fixes 2 records
Priority MEDIUM 40
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02261 · Published 2018-10-26 · Fixed CWE-502
Priority LOW 18
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.01051 · Published 2019-01-11 · Partial fix CWE-125
