Synopsis

Moderate: systemd security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

An update for systemd is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

• systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash (CVE-2019-6454)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• [PATCH] bus-socket: Fix line_begins() to accept word matching full (BZ#1693578)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 1667032 - CVE-2019-6454 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash
• BZ - 1693578 - [PATCH] bus-socket: Fix line_begins() to accept word matching full[ZStream Clone]

CVEs

• CVE-2019-6454

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux for x86_64 8

SRPM
systemd-239-13.el8_0.3.src.rpm	SHA-256: ecb11e79b72e7671b4f7ad3a60366b822db27b5e39c51aee66445b0deb400795
x86_64
systemd-239-13.el8_0.3.i686.rpm	SHA-256: 5bb24f9573502310367d0c9fffca8661674164ed824e44cb22813dc42e13a968
systemd-239-13.el8_0.3.x86_64.rpm	SHA-256: e387a8b9931f353ad56abb19ff1a4d6816f5dd91c2738fdc30dcabca59503b63
systemd-container-239-13.el8_0.3.i686.rpm	SHA-256: a92ee61373f726430bb5b8003be34ba44515efa5565666b98d1437a72570fe12
systemd-container-239-13.el8_0.3.x86_64.rpm	SHA-256: f15559d6d120081896632e2e5119510a3d31daf5c6477033c0e0a4cf9601f709
systemd-container-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: 69754b7ddbf60b9948d1b266ec1c3291bbd40d3866bc7bfe70bebc3c62c7c964
systemd-container-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: 529b9e28ac3652fbb729365996ab9b3ffda073b94a003fa3f33e499c7b057442
systemd-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: 1bf6a419ad999022e917b539b449abe2dfa789d0268ee29f47eee8021e51bb64
systemd-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: a04bd4bd259667744740ae2f8f5a251621a75a9f2f747f4088f3293cc1b3fba8
systemd-debugsource-239-13.el8_0.3.i686.rpm	SHA-256: 48782084da78bebc11b85fbb1883ff55e8df6ad2def053a254810b423348990f
systemd-debugsource-239-13.el8_0.3.x86_64.rpm	SHA-256: d1aaf57bfc754bbbf8be4ad95c3ad5c82e206734d18188683117494c906d2e1f
systemd-devel-239-13.el8_0.3.i686.rpm	SHA-256: 6d4f736c8b9d56a9bcf2c01cdb478b4852345d04c33a0b7966f521e71e7ff581
systemd-devel-239-13.el8_0.3.x86_64.rpm	SHA-256: f9849dbd2e1efd8bd63139891db197759a62f008dcf04cbe99b2e07b5c744c70
systemd-journal-remote-239-13.el8_0.3.x86_64.rpm	SHA-256: 552b11201de84dbc8ba92450cd50eb1b6798e60e12bfe27d2bf90dd3c1acfe60
systemd-journal-remote-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: 441864822477968e5d56fd3bde4f1bdf553bfe391ef71a462c76224fabff1712
systemd-journal-remote-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: d6801619e0fe0de89ae4dea22cfb3edaa2d569cdfbef76820d4be94c6712b91c
systemd-libs-239-13.el8_0.3.i686.rpm	SHA-256: 17c829008073e43af0046d198b7620dfb8dcf8c523e289a1870e306fae735da0
systemd-libs-239-13.el8_0.3.x86_64.rpm	SHA-256: 075f53bb450d0726466ff624c10d51680b146939f9e247100051a633e24d264c
systemd-libs-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: 2de650f0e8a7d87b2a956016656492dee7fcb6d4ac3772149340136e8e85f5b7
systemd-libs-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: 2d66b34782b8ab54fa2bf6d508d9bd41db24348e2138be25f02a9020d8fc3423
systemd-pam-239-13.el8_0.3.x86_64.rpm	SHA-256: 4bb7e7ee0a3573ff6d5f3fa8702a167d2fd8f8130957e383ee30cb6457b01ee4
systemd-pam-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: fa314c72b7be036d92e3eb7ae0d836bee906c9df41b0e352b0530ad35bdb3343
systemd-pam-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: 8e41ad3f5b06a1c4dff5265a80d2ef26785abf7b884564fd560e2afe63577ccf
systemd-tests-239-13.el8_0.3.x86_64.rpm	SHA-256: 43b078bfabb6cedf2ea6e3bd16f75a1bc58581ddab9633660b02173c8b7f9f27
systemd-tests-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: e1acc5db877b89dcddfe01458fe4781ba1a11aff878438bf9449b796b216bdc8
systemd-tests-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: e4dd89098562b97498c86cc616d90042e3e3ec9cf1f39762f92db7e15bc22a04
systemd-udev-239-13.el8_0.3.x86_64.rpm	SHA-256: 0e0094205740f4db5341360adbc549509369ada6a4d140cb449c9c2fabf06e8a
systemd-udev-debuginfo-239-13.el8_0.3.i686.rpm	SHA-256: 56e3854d1b6170767d483607753951a680ff3703dcb9a69f8d115876610cadbf
systemd-udev-debuginfo-239-13.el8_0.3.x86_64.rpm	SHA-256: b227cf471ab0cca5009e3635d255fe9cb0ae0464907b050143c1c39564f6f97b

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
systemd-239-13.el8_0.3.src.rpm	SHA-256: ecb11e79b72e7671b4f7ad3a60366b822db27b5e39c51aee66445b0deb400795
s390x
systemd-239-13.el8_0.3.s390x.rpm	SHA-256: 99644bac91bafd6720636874c26eec10211d90de1bc5c6e01bcc5b9964d7b93c
systemd-container-239-13.el8_0.3.s390x.rpm	SHA-256: cb85f5ca88ec562582a77707cc837dccce2b1c84015f19aeeadc60458a1c9f13
systemd-container-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: 1dc56fb849a7e931c535936408ac3809de3e7739591b37cd17e490a82cf5922c
systemd-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: b7434e906efe5ecff9f9a9ba648e35ad2d22131d597e64384c0f4a89f68294b8
systemd-debugsource-239-13.el8_0.3.s390x.rpm	SHA-256: 723bbf6f906e6b2a66b84ed2b014fdbe7c9c97fd41f69aa96b5c6fe9848c3345
systemd-devel-239-13.el8_0.3.s390x.rpm	SHA-256: 7ca928bf5239e41264b44d7893135682ca47e44bd19139d179595e9aa55d019b
systemd-journal-remote-239-13.el8_0.3.s390x.rpm	SHA-256: 81dbb6863794ac4adfa615111120deee465790a4aaa68fa5c4584e803499f32f
systemd-journal-remote-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: bd9e73a91b4997bd5516de72a271d4c8ee064d8884041a9e8fc5c63a77a6cf0a
systemd-libs-239-13.el8_0.3.s390x.rpm	SHA-256: 5f37940a1b775653333a2bb04b35400ef6963fcdd6884c2c0d462d0a4ac45e12
systemd-libs-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: 2ce905aa38978614073362c83ec30a71cf83316664ddda16f1f7b8067274206c
systemd-pam-239-13.el8_0.3.s390x.rpm	SHA-256: 9eb3f747f811e572447577836259838fe6061edc85cd6cefa11dc618a2db5191
systemd-pam-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: 8fa578e1130b74d1e851b7b66bfccfc62f39dccca8af942aa291bd89614aef9c
systemd-tests-239-13.el8_0.3.s390x.rpm	SHA-256: 2256769e8a11f9fe3759d87ce43b32e9098e30acad751509a71838a949b5f14f
systemd-tests-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: da5bb71b078337507261dede8e642184f6a51329648a3e8a704d00e400e2a866
systemd-udev-239-13.el8_0.3.s390x.rpm	SHA-256: a1c2e4770b798e9de19b851bd20c738f98c3906c33655a34008cf3778ab07250
systemd-udev-debuginfo-239-13.el8_0.3.s390x.rpm	SHA-256: b5f3b3c26f1f6150fac50d2273a108b30a0d2a1fbb38ea82410e6f97f3021bfe

Red Hat Enterprise Linux for Power, little endian 8

SRPM
systemd-239-13.el8_0.3.src.rpm	SHA-256: ecb11e79b72e7671b4f7ad3a60366b822db27b5e39c51aee66445b0deb400795
ppc64le
systemd-239-13.el8_0.3.ppc64le.rpm	SHA-256: 2311253fa91ea2c5279be915fafd0bca844e00274a3fe527a3ecb4a59e892714
systemd-container-239-13.el8_0.3.ppc64le.rpm	SHA-256: 791cb24b26516ac73baab10bbc8468544a0387c2c7e45838cb290eea6c0f0dc5
systemd-container-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: 9b0d835dac18b5e35a306f115a401b0c89077396ceb04765b47bf6bbf2551e5b
systemd-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: b8db487a1cb57c3bc500246ef5d37fdbcf0b07c16df3a6bc2bd52c38874b19b9
systemd-debugsource-239-13.el8_0.3.ppc64le.rpm	SHA-256: fbbc012910cfe89e4003448616044a44c7bdf5aed450eaa82c1761014606541c
systemd-devel-239-13.el8_0.3.ppc64le.rpm	SHA-256: 27c89f82e99a9cabcf01a636f54433a01639699a48d8ae82979457cc3eea0eff
systemd-journal-remote-239-13.el8_0.3.ppc64le.rpm	SHA-256: d861a538675a29070d94fcdd821bd949365ccf8eb971f39b9825c10a7dc66b3f
systemd-journal-remote-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: 972a00b21dbdf88a2bd8896f2929e5931ce4563a0c23872f6a31ac06299348ba
systemd-libs-239-13.el8_0.3.ppc64le.rpm	SHA-256: f3fb69366a429eaebec6cb7650c1d550bde09dc1194451b688c8c26fb7500f06
systemd-libs-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: 6f9babadcd3030bbce3f179361e47bf194100e38e87266a923091b2da63771fa
systemd-pam-239-13.el8_0.3.ppc64le.rpm	SHA-256: 93a0419803e03d377bec0c84859fa08ac1b9e2339b53699650d25b5157f87ee9
systemd-pam-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: 432bcfb27a64ac0f08bd19c0b8d7bfd18b030e1464954984e68a233f250fa5ec
systemd-tests-239-13.el8_0.3.ppc64le.rpm	SHA-256: 8adf28a74c2c4e1541f9ee79327d1fb34753ccdb6e91a0c0748cc36f01b3b05e
systemd-tests-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: eba9172905b23ebc205cf4a1d8c5bc645e793b3047dee359b5aad81526bb1a69
systemd-udev-239-13.el8_0.3.ppc64le.rpm	SHA-256: c47e2a5294bfd6f31ceea55345d3b94343b7d1e5de47e90f65e950ca10bf161b
systemd-udev-debuginfo-239-13.el8_0.3.ppc64le.rpm	SHA-256: b8e3cbfac849fe3f78cb612cb052d8865ac4147962b165d818230f883019a300

Red Hat Enterprise Linux for ARM 64 8

SRPM
systemd-239-13.el8_0.3.src.rpm	SHA-256: ecb11e79b72e7671b4f7ad3a60366b822db27b5e39c51aee66445b0deb400795
aarch64
systemd-239-13.el8_0.3.aarch64.rpm	SHA-256: 6692ef894f7c5ae29fc2025f204de004ecacf173340b5375852f6986c7770752
systemd-container-239-13.el8_0.3.aarch64.rpm	SHA-256: 23436072df38c2bc6e2a14b814baf714d6f3b67cba3e2c0b9594c4958d5e28fc
systemd-container-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: 5344cc6da5d0709efd631a065a73966dd255a1dc4816be2fe4cc6c6c62e007ba
systemd-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: 2abc98cbbf6547b673a3e49ce4c2cd0e8de68a0cc9df11f6c15a62d1d1eead8e
systemd-debugsource-239-13.el8_0.3.aarch64.rpm	SHA-256: 9d1530b5c046e7db3117f2798a79ac41e2601f1feba1acd5fe983fb8434dcab2
systemd-devel-239-13.el8_0.3.aarch64.rpm	SHA-256: bb05e1de26df6e023fb582ff62860d452a29921fa5def4aa971c7da00d5e4688
systemd-journal-remote-239-13.el8_0.3.aarch64.rpm	SHA-256: 589a1870434fabdd8dfb5bcce7584f954cbd8e6ae9b638ac6dcbe646238e3625
systemd-journal-remote-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: e17f25f4782d20552c65c6942c77ecef4d31b30aaad9bd156f335104513b9da0
systemd-libs-239-13.el8_0.3.aarch64.rpm	SHA-256: 85a125f07f6e612d8b9baa9dcc4b5167902098fb3290dbfb926767912ce13983
systemd-libs-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: 3a4f78cf391eb5432be8f810b94918175b960727be80c235d2d5216c83b3b6c9
systemd-pam-239-13.el8_0.3.aarch64.rpm	SHA-256: b9bfb2c9e6c260883592c603e51cfde29a35bc02b047573d46cfb140d43fd95a
systemd-pam-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: 5742147a67daf9f44fa3ead8a0f1edbe1d314331a053ef84836cb1b286b37b51
systemd-tests-239-13.el8_0.3.aarch64.rpm	SHA-256: b53fc178b1931943b3692379d6e1dec707c56c2515dcf068b268266f7474e139
systemd-tests-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: 9adac3fcabfe6e37e6edba1729e10bc145e85c7d3feb15b30460936ee90441b4
systemd-udev-239-13.el8_0.3.aarch64.rpm	SHA-256: cff11bedaa28d32dfd8cee9133c53fa39b19c497fdd3c6700b55cefe8fe6693e
systemd-udev-debuginfo-239-13.el8_0.3.aarch64.rpm	SHA-256: 7626a9962846602deb175d4db8c7edf1690c43a2817a608e134c319d2df5d66f