PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour systemd au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 5
This update for systemd, systemd-mini fixes the following issue Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit eba1930de8 (bsc#1267647). - Import commit 5d46cdd987 (bsc#1261982 bsc#1261983). - Import commit ac1173932c (bsc#1261982). - Import commit c7f3e89374 (bsc#1261983).
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: - 566517ffcb machined: reject invalid class types when registering machines - abbdd89d78 udev: fix review mixup - c9cedd26be udev-builtin-net-id: print cescaped bad attributes - c0f4ec3db9 udev: ensure tag parsing stays within bounds - 38afcb73cc udev: ensure there is space for trailin
This update for systemd fixes the following issues: - CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935). - CVE-2023-26604: Privilege escalation via the less pager (bsc#1208958). - CVE-2022-4415: systemd-coredump was not respecting fs.suid_dumpable kernel setting (bsc#1205000). Other bugfixes: - clarify passno and noauto combination in /etc/fstab (bsc#1211725) - handle -EINTR return from bus_poll() (bsc#1215241) - /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723). - Set SYSTEMD_NSS_DYNAMIC_BYPASS=1 env var for dbus-daemon (bsc#1203857). - Restrict cpu rule to x86_64, and also update the rule files to make use of the 'CONST{arch}' syntax (bsc#1204423).
This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 56bee38fd0da18dad5fc5c5d12c02238a22b50e2 * 8a70235d8a core: Add trigger limit for path units * 93e544f3a0 core/mount: also add default before dependency for automount mount units * 5916a7748c logind: fix crash in logind on user-specified message string - Document udev naming scheme (bsc#1204179).
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.