SUSE-SU-2026:20826-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202620826-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20826-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:20826-1
- Upstream
CVE (2)
- Related
- Published
- 2026-03-24T09:34:46Z
- Modified
- 2026-03-27T17:23:47Z
- Summary
- Security update for systemd
- Details
-
This update for systemd fixes the following issues:
- CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650).
- CVE-2026-29111: local unprivileged user can trigger an assert in systemd (bsc#1259418).
- udev: check for invalid chars in various fields received from the kernel (bsc#1259697).
Changelog:
- a943e3ce2f machined: reject invalid class types when registering machines
- 71593f77db udev: fix review mixup
- 73a89810b4 udev-builtin-net-id: print cescaped bad attributes
- 0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
- 40905232e2 udev: ensure tag parsing stays within bounds
- 7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
- d018ac1ea3 udev: check for invalid chars in various fields received from the kernel
- aef6e11921 core/cgroup: avoid one unnecessary strjoina()
- cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
- 26a748f727 core: validate input cgroup path more prudently
- 99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs
- References
Affected packages
SUSE:Linux Micro 6.1 / systemd
Package
- Name
- systemd
- Purl
- pkg:rpm/suse/systemd&distro=SUSE%20Linux%20Micro%206.1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed254.27-slfo.1.1_4.1
Ecosystem specific
{
"binaries": [
{
"libsystemd0": "254.27-slfo.1.1_4.1",
"libudev1": "254.27-slfo.1.1_4.1",
"systemd": "254.27-slfo.1.1_4.1",
"systemd-container": "254.27-slfo.1.1_4.1",
"systemd-coredump": "254.27-slfo.1.1_4.1",
"systemd-experimental": "254.27-slfo.1.1_4.1",
"systemd-journal-remote": "254.27-slfo.1.1_4.1",
"systemd-portable": "254.27-slfo.1.1_4.1",
"systemd-sysvcompat": "254.27-slfo.1.1_4.1",
"udev": "254.27-slfo.1.1_4.1"
}
]
}