Security update for systemd

Announcement ID: SUSE-SU-2025:20597-1
Release Date: 2025-08-16T11:46:56Z
Rating: moderate
References:
Cross-References:
CVSS scores:
  • CVE-2025-4598 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2025-4598 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products:
  • SUSE Linux Micro 6.1
  • SUSE Linux Micro Extras 6.1

An update that solves one vulnerability and has two fixes can now be installed.

Description:

This update for systemd fixes the following issues:

  • Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations (bsc#1247074)

The script was introduced more than 7 years ago and all systems running TW should have been migrated since then. Moreover the installer supports the systemd default locations since approximately SLE15.

  • triggers.systemd: skip update of hwdb, journal-catalog if executed during an offline update.

  • logs-show: get timestamp and boot ID only when necessary (bsc#1242827)

  • sd-journal: drop to use Hashmap to manage journal files per boot ID
  • tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  • sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  • sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  • sd-journal: cache last entry offset and journal file state

  • sd-journal: fix typo in function name

  • coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)

Special Instructions and Notes:

  • Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Micro 6.1
    zypper in -t patch SUSE-SLE-Micro-6.1-218=1
  • SUSE Linux Micro Extras 6.1
    zypper in -t patch SUSE-SLE-Micro-6.1-218=1

Package List:

  • SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64)
    • systemd-debugsource-254.27-slfo.1.1_1.1
    • libsystemd0-254.27-slfo.1.1_1.1
    • systemd-coredump-debuginfo-254.27-slfo.1.1_1.1
    • libsystemd0-debuginfo-254.27-slfo.1.1_1.1
    • systemd-debuginfo-254.27-slfo.1.1_1.1
    • libudev1-debuginfo-254.27-slfo.1.1_1.1
    • systemd-portable-254.27-slfo.1.1_1.1
    • udev-254.27-slfo.1.1_1.1
    • systemd-journal-remote-254.27-slfo.1.1_1.1
    • systemd-254.27-slfo.1.1_1.1
    • libudev1-254.27-slfo.1.1_1.1
    • systemd-container-debuginfo-254.27-slfo.1.1_1.1
    • systemd-experimental-254.27-slfo.1.1_1.1
    • systemd-journal-remote-debuginfo-254.27-slfo.1.1_1.1
    • systemd-container-254.27-slfo.1.1_1.1
    • udev-debuginfo-254.27-slfo.1.1_1.1
    • systemd-coredump-254.27-slfo.1.1_1.1
    • systemd-experimental-debuginfo-254.27-slfo.1.1_1.1
    • systemd-portable-debuginfo-254.27-slfo.1.1_1.1
  • SUSE Linux Micro 6.1 (ppc64le)
    • systemd-sysvcompat-debuginfo-254.27-slfo.1.1_1.1
    • systemd-sysvcompat-254.27-slfo.1.1_1.1
  • SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64)
    • systemd-debugsource-254.27-slfo.1.1_1.1
    • systemd-devel-254.27-slfo.1.1_1.1

References: