[ubuntu/noble-security] systemd 255.4-1ubuntu8.16 (Accepted)

[Marc Deslauriers]

systemd (255.4-1ubuntu8.16) noble-security; urgency=medium

  * SECURITY UPDATE: escape-to-host via malformed optional config file
    - debian/patches/CVE-2026-40226-1.patch: nspawn: apply BindUser/Ephemeral
      from settings file only if trusted in src/nspawn/nspawn.c.
    - debian/patches/CVE-2026-40226-2.patch: nspawn: normalize pivot_root paths
      in src/nspawn/nspawn-mount.c.
    - CVE-2026-40226

systemd (255.4-1ubuntu8.15) noble; urgency=medium

  [ Robert Malz ]
  * network: also check ID_NET_MANAGED_BY property on reconfigure
    (LP: #2133159)
  * net_id: depending on new udev prop, include/exclude PCI domain from netif names
    (LP: #2134334)

  [ Ioana Lazea ]
  * timer: don't run service immediately after restart of a timer (LP: #2141296)

Date: 2026-06-05 17:47:11.729282+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/systemd/255.4-1ubuntu8.16
-------------- next part --------------
Sorry, changesfile not available.