SUSE-SU-2026:1061-1

SUSE-SU-2026:1061-1 · Security update for systemd

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for systemd fixes the following issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418). - udev: check for invalid chars in various fields received from the kernel (bsc#1259697). Changelog: - 6a38d88a42 machined: reject invalid class types when registering machines - 8c9a592e5a udev: fix review mixup - b57007a917 udev-builtin-net-id: print cescaped bad attributes - ee23c7604b udev-builtin-net_id: do not assume the current interface name is ethX - 0f63e799e6 udev: ensure tag parsing stays within bounds - 046f52ec12 udev: ensure there is space for trailing NUL before calling sprintf - 5be21460ce udev: check for invalid chars in various fields received from the kernel - 9559607b16 core/cgroup: avoid one unnecessary strjoina() - fcae348ca4 core: validate input cgroup path more prudently - a3ca6b3031 alloc-util: add strdupa_safe() + strndupa_safe() and use it everywhere - 08125d6b06 units: add dep on systemd-logind.service by [email protected]

Fix available

Published

2026-03-26T10:35:55Z

Updated

2026-03-27T08:48:27.549972Z

Stack: system

Check your server →