Red Hat Security AdvisoryRHSA-2020:1264
systemd security and bug fix update
Released 2020-04-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) libgudev1-219-57.el7_5.9, systemd-219-57.el7_5.9, systemd-libs-219-57.el7_5.9 +2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) libgudev1-devel-219-57.el7_5.9, systemd-devel-219-57.el7_5.9, systemd-journal-gateway-219-57.el7_5.9 +2
- Red Hat Enterprise Linux Server EUS (v. 7.5) libgudev1-219-57.el7_5.9, libgudev1-219-57.el7_5.9.ppc, libgudev1-devel-219-57.el7_5.9 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) systemd-journal-gateway-219-57.el7_5.9, systemd-networkd-219-57.el7_5.9, systemd-resolved-219-57.el7_5.9 +1
Fixes 2 records
Priority MEDIUM 40
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.02261 · Published 2018-10-26 · Fixed CWE-502
Priority LOW 18
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.01051 · Published 2019-01-11 · Partial fix CWE-125
