PatchFirst · Latest vulnerabilities
Vulnerabilities published for systemd in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
This update for systemd fixes the following issue Security issues fixed: - CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400). Other updates and bugfixes: - Import commit 37508f8ec1 (bsc#1267647). - Import commit c7530fbea3 (bsc#1261982 bsc#1261983). - Import commit 5c4ed461a7 (bsc#1261982). - Import commit 4b963df038 (bsc#1261983).
This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: - 6a38d88a42 machined: reject invalid class types when registering machines - 8c9a592e5a udev: fix review mixup - b57007a917 udev-builtin-net-id: print cescaped bad attributes - ee23c7604b udev-builtin-net_id: do not assume the current interface name is ethX - 0f63e799e6 udev: ensure t
This update for systemd fixes the following issues: - CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).
This update for systemd fixes the following issues: - CVE-2023-7008: Fixed man-in-the-middle due to unsigned name response in signed zone not refused when DNSSEC=yes (bsc#1218297) Other fixes: - Unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226414) - Don't mention any rpm macros inside comments, even if escaped (bsc#1228091) - Skip redundant dependencies specified the LSB description that references the file name of the service itself for early boot scripts (bsc#1221479).
Check your installed stack and versions against the current vulnerability feeds.