SUSE-SU-2026:0991-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20260991-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0991-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:0991-1
- Upstream
- Related
- Published
- 2026-03-24T07:23:00Z
- Modified
- 2026-03-25T08:30:52Z
- Summary
- Security update for systemd
- Details
-
This update for systemd fixes the following issue:
- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).
- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).
Changelog:
cbf8ee66ee machined: reject invalid class types when registering machines 1a55ad48da udev: fix review mixup 1eba76668c udev-builtin-net-id: print cescaped bad attributes cbd4b55380 udev: ensure tag parsing stays within bounds 5973d3b1cc udev: ensure there is space for trailing NUL before calling sprintf f038eb6c8b udev: check for invalid chars in various fields received from the kernel
- References
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / systemd
Package
- Name
- systemd
- Purl
- pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed228-157.75.1
Ecosystem specific
{
"binaries": [
{
"libsystemd0": "228-157.75.1",
"libsystemd0-32bit": "228-157.75.1",
"libudev-devel": "228-157.75.1",
"libudev1": "228-157.75.1",
"libudev1-32bit": "228-157.75.1",
"systemd": "228-157.75.1",
"systemd-32bit": "228-157.75.1",
"systemd-bash-completion": "228-157.75.1",
"systemd-devel": "228-157.75.1",
"systemd-sysvinit": "228-157.75.1",
"udev": "228-157.75.1"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / systemd
Package
- Name
- systemd
- Purl
- pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed228-157.75.1
Ecosystem specific
{
"binaries": [
{
"libsystemd0": "228-157.75.1",
"libsystemd0-32bit": "228-157.75.1",
"libudev-devel": "228-157.75.1",
"libudev1": "228-157.75.1",
"libudev1-32bit": "228-157.75.1",
"systemd": "228-157.75.1",
"systemd-32bit": "228-157.75.1",
"systemd-bash-completion": "228-157.75.1",
"systemd-devel": "228-157.75.1",
"systemd-sysvinit": "228-157.75.1",
"udev": "228-157.75.1"
}
]
}