SUSE-SU-2026:2785-1

Details

Description of the patch:

This update for systemd, systemd-mini fixes the following issue

Security issues fixed:

CVE-2026-40226: nspawn: escape-to-host via malformed optional config file (bsc#1261400).

Other updates and bugfixes:

Import commit eba1930de8 (bsc#1267647).
Import commit 5d46cdd987 (bsc#1261982 bsc#1261983).
Import commit ac1173932c (bsc#1261982).
Import commit c7f3e89374 (bsc#1261983).

Affected Packages

libsystemd0

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

libudev1

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

systemd

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

systemd-container

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

systemd-journal-remote

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

systemd-sysvinit

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

udev

SUSE Linux Enterprise Micro 5.2

Fixed in:

246.16-150300.7.74.1

References

ADVISORY

https://bugzilla.suse.com/1261400

ADVISORY

https://bugzilla.suse.com/1261982

ADVISORY

https://bugzilla.suse.com/1261983

ADVISORY

https://bugzilla.suse.com/1267647

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-July/027326.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-40226/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262785-1/