Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3244-1

Опубликовано: 24 июл. 2026
Источник: suse-cvrf

Описание

Security update for systemd

This update for systemd fixes the following issues

Security issues fixed:

  • CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

  • Fix soft reboot not restarting user services with default.target (bsc#1262305).
  • Import commit e46e1952d5 (bsc#1267647 bsc#1262305 bsc#1267644).
  • Import commit 429043ca9a (bsc#1261982 bsc#1261983).
  • Import commit 58e5d2e21e (bsc#1261982).
  • Import commit 4bd91117cc (bsc#1261983).

Список пакетов

Container bci/bci-init:latest
libsystemd0-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container bci/gcc:latest
libsystemd0-254.27-150600.4.71.2
Container bci/golang:1.25
libsystemd0-254.27-150600.4.71.2
Container bci/golang:1.25-openssl
libsystemd0-254.27-150600.4.71.2
Container bci/golang:latest
libsystemd0-254.27-150600.4.71.2
Container bci/node:22
libsystemd0-254.27-150600.4.71.2
Container bci/openjdk:17
libsystemd0-254.27-150600.4.71.2
Container bci/openjdk:21
libsystemd0-254.27-150600.4.71.2
Container bci/openjdk:latest
libsystemd0-254.27-150600.4.71.2
Container bci/php-fpm:latest
libsystemd0-254.27-150600.4.71.2
Container bci/python:3
libsystemd0-254.27-150600.4.71.2
Container bci/python:latest
libsystemd0-254.27-150600.4.71.2
Container bci/ruby:2
libsystemd0-254.27-150600.4.71.2
Container bci/ruby:latest
libsystemd0-254.27-150600.4.71.2
Container bci/spack:latest
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
Container suse/kiosk/firefox-esr:latest
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
Container suse/kiosk/pulseaudio:latest
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
udev-254.27-150600.4.71.2
Container suse/kiosk/tigervnc-x11vnc:latest
libsystemd0-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container suse/kiosk/xorg-client:latest
libsystemd0-254.27-150600.4.71.2
Container suse/kiosk/xorg:latest
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
udev-254.27-150600.4.71.2
Container suse/mariadb:latest
libsystemd0-254.27-150600.4.71.2
Container suse/postgres:16
libsystemd0-254.27-150600.4.71.2
Container suse/postgres:16.14
libsystemd0-254.27-150600.4.71.2
Container suse/postgres:17
libsystemd0-254.27-150600.4.71.2
Container suse/postgres:17.10
libsystemd0-254.27-150600.4.71.2
Container suse/postgres:latest
libsystemd0-254.27-150600.4.71.2
Container suse/rmt-server:latest
libudev1-254.27-150600.4.71.2
Container suse/samba-client:latest
libsystemd0-254.27-150600.4.71.2
Container suse/samba-server:latest
libsystemd0-254.27-150600.4.71.2
Container suse/samba-toolbox:latest
libsystemd0-254.27-150600.4.71.2
Container suse/sle15:latest
libudev1-254.27-150600.4.71.2
Container third-party/nvidia/driver:550-sles15.7
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container third-party/nvidia/driver:570-sles15.7
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container third-party/nvidia/driver:575-sles15.7
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container third-party/nvidia/driver:580-sles15.7
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container third-party/nvidia/driver:590-sles15.7
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
Container third-party/nvidia/driver:595-sles15.7
libsystemd0-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
SUSE Linux Enterprise Module for Basesystem 15 SP7
libsystemd0-254.27-150600.4.71.2
libsystemd0-32bit-254.27-150600.4.71.2
libudev1-254.27-150600.4.71.2
libudev1-32bit-254.27-150600.4.71.2
systemd-254.27-150600.4.71.2
systemd-32bit-254.27-150600.4.71.2
systemd-container-254.27-150600.4.71.2
systemd-coredump-254.27-150600.4.71.2
systemd-devel-254.27-150600.4.71.2
systemd-doc-254.27-150600.4.71.2
systemd-journal-remote-254.27-150600.4.71.2
systemd-lang-254.27-150600.4.71.2
systemd-resolved-254.27-150600.4.71.2
systemd-sysvcompat-254.27-150600.4.71.2
udev-254.27-150600.4.71.2
SUSE Linux Enterprise Module for Package Hub 15 SP7
systemd-network-254.27-150600.4.71.2
systemd-networkd-254.27-150600.4.71.2

Ссылки

Описание

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Затронутые продукты
Container bci/bci-init:latest:libsystemd0-254.27-150600.4.71.2
Container bci/bci-init:latest:systemd-254.27-150600.4.71.2
Container bci/gcc:latest:libsystemd0-254.27-150600.4.71.2
Container bci/golang:1.25-openssl:libsystemd0-254.27-150600.4.71.2
Ссылки
Уязвимость SUSE-SU-2026:3244-1