{"id":"openSUSE-SU-2026:21222-1","aliases":[],"status":"published","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nChanges in systemd:\n\n- Better handle TLS allocation failure (bsc#1254924).\n- Disable mounting `debugfs` by default (jsc#PED-8812).\n- Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647 bsc#1267644 bsc#1262305 bsc#1263117).\n- Move `systemd-pcrlock` out from the experimental sub-package to `udev` (bsc#1248261 jsc#PED-15946).\n- Add a weak runtime dependency on `libtss2-tcti-device0` (bsc#1260357).\n- Import commit 59336000ef7850eba0963c6a690ff3371c425929 (bsc#1261982 bsc#1261983).\n- Add a weak runtime dependency on `polkit` (bsc#1259071).\n- systemd-update-helper: fix the clean-state command only removing `$STATE_DIR/system` instead of `$STATE_DIR/`.\n- systemd-update-helper: add `--root` option for testing convenience.\n- systemd-update-helper: fix incorrect skipping of `systemctl disable` during package removal (bsc#1245551).\n- systemd-update-helper: fix `do_install_units()` incorrectly returning 1 when no units need preset.\n- systemd.spec: introduce `%bcond_without` docs to allow skipping man pages and `devel-doc`.\n- systemd.spec: drop the `%{release}` number from the SBAT version (bsc#1251948).","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-03T08:55:00Z","modified":"2026-07-05T18:24:09Z","fixes":[{"ecosystem":"openSUSE:Leap 16.0","package":"systemd","fixed_in":["257.13-160000.2.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"systemd-mini","fixed_in":["257.13-160000.2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"systemd-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"257.13-160000.2.1"}]}]}],"references":[{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245551","tags":["report"]},{"url":"https://bugzilla.suse.com/1248261","tags":["report"]},{"url":"https://bugzilla.suse.com/1251948","tags":["report"]},{"url":"https://bugzilla.suse.com/1254924","tags":["report"]},{"url":"https://bugzilla.suse.com/1259071","tags":["report"]},{"url":"https://bugzilla.suse.com/1260357","tags":["report"]},{"url":"https://bugzilla.suse.com/1261982","tags":["report"]},{"url":"https://bugzilla.suse.com/1261983","tags":["report"]},{"url":"https://bugzilla.suse.com/1262305","tags":["report"]},{"url":"https://bugzilla.suse.com/1263117","tags":["report"]},{"url":"https://bugzilla.suse.com/1267644","tags":["report"]},{"url":"https://bugzilla.suse.com/1267647","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2026:21222-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nChanges in systemd:\n\n- Better handle TLS allocation failure (bsc#1254924).\n- Disable mounting `debugfs` by default (jsc#PED-8812).\n- Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647 bsc#1267644 bsc#1262305 bsc#1263117).\n- Move `systemd-pcrlock` out from the experimental sub-package to `udev` (bsc#1248261 jsc#PED-15946).\n- Add a weak runtime dependency on `libtss2-tcti-device0` (bsc#1260357).\n- Import commit 59336000ef7850eba0963c6a690ff3371c425929 (bsc#1261982 bsc#1261983).\n- Add a weak runtime dependency on `polkit` (bsc#1259071).\n- systemd-update-helper: fix the clean-state command only removing `$STATE_DIR/system` instead of `$STATE_DIR/`.\n- systemd-update-helper: add `--root` option for testing convenience.\n- systemd-update-helper: fix incorrect skipping of `systemctl disable` during package removal (bsc#1245551).\n- systemd-update-helper: fix `do_install_units()` incorrectly returning 1 when no units need preset.\n- systemd.spec: introduce `%bcond_without` docs to allow skipping man pages and `devel-doc`.\n- systemd.spec: drop the `%{release}` number from the SBAT version (bsc#1251948).\n","status":"published","published":"2026-07-03T08:55:00Z","modified":"2026-07-05T18:24:09.761800128Z","updated_at":"2026-11-02T16:58:41.885092Z"}]}}