SUSE-SU-2026:22736-1

Details

Description of the patch:

This update for systemd fixes the following issues:

Security issues fixed:

CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

Import commit 260e668bfa (bsc#1267647 bsc#1262305 bsc#1267644).
Import commit 58e5d2e21e (bsc#1261982).
Import commit 4bd91117cc (bsc#1261983).

Affected Packages

libsystemd0

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

libudev1

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

systemd

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

systemd-container

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

systemd-coredump

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

systemd-experimental

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

systemd-journal-remote

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

systemd-portable

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

udev

SUSE Linux Micro 6.0

Fixed in:

254.27-4.1

References

ADVISORY

https://bugzilla.suse.com/1261400

ADVISORY

https://bugzilla.suse.com/1261982

ADVISORY

https://bugzilla.suse.com/1261983

ADVISORY

https://bugzilla.suse.com/1262305

ADVISORY

https://bugzilla.suse.com/1267644

ADVISORY

https://bugzilla.suse.com/1267647

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-July/048534.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-40226/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-202622736-1/