Package "systemd-standalone-tmpfiles"

  systemd (255.4-1ubuntu8.16) noble-security; urgency=medium

  * SECURITY UPDATE: escape-to-host via malformed optional config file
    - debian/patches/CVE-2026-40226-1.patch: nspawn: apply BindUser/Ephemeral
      from settings file only if trusted in src/nspawn/nspawn.c.
    - debian/patches/CVE-2026-40226-2.patch: nspawn: normalize pivot_root paths
      in src/nspawn/nspawn-mount.c.
    - CVE-2026-40226

 -- Marc Deslauriers <email address hidden> Fri, 05 Jun 2026 11:36:29 -0400

  systemd (255.4-1ubuntu8.14) noble-security; urgency=medium

  * SECURITY UPDATE: Local unprivileged user can trigger an assert in systemd
    - d/p/CVE-2026-29111-1.patch: path-util: add flavour of path_startswith() that leaves
      a leading slash in place
    - d/p/CVE-2026-29111-2.patch: path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag
    - d/p/CVE-2026-29111-3.patch: core/cgroup: avoid one unnecessary strjoina()
    - d/p/CVE-2026-29111-4.patch: core: validate input cgroup path more prudently
  * SECURITY UPDATE: Local root execution via malicious hardware devices
    - d/p/udev-check-for-invalid-chars-in-various-fields-received-f.patch
    - d/p/udev-fix-review-mixup.patch
    - No CVE number

 -- Nick Rosbrook <email address hidden> Fri, 13 Mar 2026 12:48:42 -0400

  systemd (255.4-1ubuntu8.8) noble-security; urgency=medium

  * SECURITY UPDATE: race condition in systemd-coredump
    - debian/patches/CVE_2025_4598_1.patch: coredump: get rid of
      _META_MANDATORY_MAX.
    - debian/patches/CVE_2025_4598_2.patch: coredump: use %d in kernel core
      pattern.
    - debian/patches/CVE_2025_4598_3.patch: coredump: also stop forwarding
      non-dumpable processes.
    - debian/patches/CVE_2025_4598_4.patch: coredump: get rid of a bogus
      assertion.
    - CVE-2025-4598
  * this update does not include the changes from 255.4-1ubuntu8.7 as included in noble-proposed

 -- Octavio Galland <email address hidden> Wed, 04 Jun 2025 09:24:15 -0300