UbuntuUpdates.org

Package "systemd-container"

Name: systemd-container

Description:

systemd container/nspawn tools
Latest version: 255.4-1ubuntu8.17
Release: noble (24.04)
Level: updates
Repository: main
Head package: systemd
Homepage: https://www.freedesktop.org/wiki/Software/systemd

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "systemd-container"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "systemd-container" in Noble

Repository Area Version
base main 255.4-1ubuntu8
security main 255.4-1ubuntu8.17

Changelog

Version: 255.4-1ubuntu8.17 2026-08-10 17:08:39 UTC
No changelog available yet.
Source diff to previous version

Version: 255.4-1ubuntu8.16 2026-06-08 19:07:37 UTC

  systemd (255.4-1ubuntu8.16) noble-security; urgency=medium

  * SECURITY UPDATE: escape-to-host via malformed optional config file
    - debian/patches/CVE-2026-40226-1.patch: nspawn: apply BindUser/Ephemeral
      from settings file only if trusted in src/nspawn/nspawn.c.
    - debian/patches/CVE-2026-40226-2.patch: nspawn: normalize pivot_root paths
      in src/nspawn/nspawn-mount.c.
    - CVE-2026-40226

 -- Marc Deslauriers <email address hidden> Fri, 05 Jun 2026 11:36:29 -0400
Source diff to previous version
CVE-2026-40226 In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Version: 255.4-1ubuntu8.15 2026-04-08 06:08:04 UTC

  systemd (255.4-1ubuntu8.15) noble; urgency=medium

  [ Robert Malz ]
  * network: also check ID_NET_MANAGED_BY property on reconfigure
    (LP: #2133159)
  * net_id: depending on new udev prop, include/exclude PCI domain from netif names
    (LP: #2134334)

  [ Ioana Lazea ]
  * timer: don't run service immediately after restart of a timer (LP: #2141296)

 -- Robert Malz <email address hidden> Tue, 24 Mar 2026 09:45:53 -0400
Source diff to previous version
2133159 systemd-networkd does not respect ID_NET_MANAGED_BY in all cases
2134334 Add ID_NET_NAME_INCLUDE_DOMAIN property support to systemd
2141296 [00427578] Restarting systemd timer triggers service start off-schedule

Version: 255.4-1ubuntu8.14 2026-03-24 09:08:00 UTC

  systemd (255.4-1ubuntu8.14) noble-security; urgency=medium

  * SECURITY UPDATE: Local unprivileged user can trigger an assert in systemd
    - d/p/CVE-2026-29111-1.patch: path-util: add flavour of path_startswith() that leaves
      a leading slash in place
    - d/p/CVE-2026-29111-2.patch: path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag
    - d/p/CVE-2026-29111-3.patch: core/cgroup: avoid one unnecessary strjoina()
    - d/p/CVE-2026-29111-4.patch: core: validate input cgroup path more prudently
  * SECURITY UPDATE: Local root execution via malicious hardware devices
    - d/p/udev-check-for-invalid-chars-in-various-fields-received-f.patch
    - d/p/udev-fix-review-mixup.patch
    - No CVE number

 -- Nick Rosbrook <email address hidden> Fri, 13 Mar 2026 12:48:42 -0400
Source diff to previous version
CVE-2026-29111 systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.

Version: 255.4-1ubuntu8.12 2025-12-16 20:35:18 UTC

  systemd (255.4-1ubuntu8.12) noble; urgency=medium

  * basic: validate timezones in get_timezones() (LP: #2125405)
  * ukify: fix insertion of padding in merged sections (LP: #2132666)
  * core: downgrade a log message from warning to debug (LP: #2130554)
  * test: skip testcase_multipath_basic_failover.
    This test has been failing on Ubuntu infrastructure for a long time.
    Leaving this alone at the moment allows other failures to potentially go
    unnoticed, because the migration reference baseline has been reset to
    fail. Skip the test to try and reset the baseline to pass.
  * d/gbp.conf: stop using wrap_cl.py

 -- Nick Rosbrook <email address hidden> Tue, 25 Nov 2025 13:16:31 -0500
2125405 timedatectl list-timezones shows timezones that are not installed
2132666 ukify PE section padding broken on 24.04
2130554 systemctl spams journal with unnecessary logs


About   -   Send Feedback to @ubuntu_updates