{"affected":[{"ecosystem_specific":{"binaries":[{"libgudev-1_0-0":"210-116.19.1","libgudev-1_0-0-32bit":"210-116.19.1","libgudev-1_0-devel":"210-116.19.1","libudev-devel":"210-116.19.1","libudev1":"210-116.19.1","libudev1-32bit":"210-116.19.1","systemd":"210-116.19.1","systemd-32bit":"210-116.19.1","systemd-bash-completion":"210-116.19.1","systemd-devel":"210-116.19.1","systemd-sysvinit":"210-116.19.1","typelib-1_0-GUdev-1_0":"210-116.19.1","udev":"210-116.19.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","name":"systemd","purl":"purl:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"210-116.19.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for systemd fixes the following issues:\n\n* Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323):\n  Both issues were memory corruptions via attacker-controlled alloca which could\n  have been used to gain root privileges by a local attacker.\n\n* Fix security vulnerability CVE-2018-15686 (bsc#1113665): A vulnerability in\n  unit_deserialize of systemd used to allow an attacker to supply arbitrary\n  state across systemd re-execution via NotifyAccess. This could have been used\n  to improperly influence systemd execution and possibly lead to root privilege\n  escalation.\n\n* Remedy 2048 character line-length limit in systemd-sysctl code that would\n  cause parser failures if /etc/sysctl.conf contained lines that exceeded this\n  length (bsc#1071558).\n\n* Fix a bug in systemd's core timer code that would cause timer looping under\n  certain conditions, resulting in hundreds of syslog messages being written to\n  the journal (bsc#1068588).\n","id":"SUSE-SU-2019:0054-1","modified":"2019-01-09T21:08:17Z","published":"2019-01-09T21:08:17Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190054-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1068588"},{"type":"REPORT","url":"https://bugzilla.suse.com/1071558"},{"type":"REPORT","url":"https://bugzilla.suse.com/1113665"},{"type":"REPORT","url":"https://bugzilla.suse.com/1120323"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-15686"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16864"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-16865"}],"related":["CVE-2018-15686","CVE-2018-16864","CVE-2018-16865"],"summary":"Security update for systemd"}