Red Hat Security AdvisoryRHSA-2020:0593
systemd security update
Released 2020-02-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.4) libgudev1-219-42.el7_4.20, libgudev1-devel-219-42.el7_4.20, systemd-219-42.el7_4.20 +4
- Red Hat Enterprise Linux Server E4S (v. 7.4) libgudev1-219-42.el7_4.20, libgudev1-devel-219-42.el7_4.20, systemd-219-42.el7_4.20 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 7.4) systemd-journal-gateway-219-42.el7_4.20, systemd-networkd-219-42.el7_4.20, systemd-resolved-219-42.el7_4.20
- Red Hat Enterprise Linux Server Optional E4S (v. 7.4) systemd-journal-gateway-219-42.el7_4.20, systemd-networkd-219-42.el7_4.20, systemd-resolved-219-42.el7_4.20
- Red Hat Enterprise Linux Server Optional TUS (v. 7.4) systemd-journal-gateway-219-42.el7_4.20, systemd-networkd-219-42.el7_4.20, systemd-resolved-219-42.el7_4.20
- Red Hat Enterprise Linux Server TUS (v. 7.4) libgudev1-219-42.el7_4.20, libgudev1-devel-219-42.el7_4.20, systemd-219-42.el7_4.20 +4
Fixes 2 records
Priority MEDIUM 40
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02261 · Published 2018-10-26 · Fixed CWE-502
Priority LOW 18
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.01051 · Published 2019-01-11 · Partial fix CWE-125
