Security update for systemd (important)

An update that solves three vulnerabilities and has 8 fixes
is now available.

Description:

This update for systemd fixes the following issues:

Security issues fixed:

• CVE-2018-6954: Fixed a vulnerability in the symlink handling of
  systemd-tmpfiles which allowed a local user to obtain ownership of
  arbitrary files (bsc#1080919).
• CVE-2019-3842: Fixed a vulnerability in pam_systemd which allowed a
  local user to escalate privileges (bsc#1132348).
• CVE-2019-6454: Fixed a denial of service caused by long dbus messages
  (bsc#1125352).

Non-security issues fixed:

• systemd-coredump: generate a stack trace of all core dumps (jsc#SLE-5933)
• udevd: notify when max number value of children is reached only once per
  batch of events (bsc#1132400)
• sd-bus: bump message queue size again (bsc#1132721)
• core: only watch processes when it’s really necessary (bsc#955942
  bsc#1128657)
• rules: load drivers only on “add” events (bsc#1126056)
• sysctl: Don’t pass null directive argument to ‘%s’ (bsc#1121563)
• Do not automatically online memory on s390x (bsc#1127557)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 42.3:

  zypper in -t patch openSUSE-2019-1450=1