Every CVESearch/Get API key

openSUSE-SU-2026:21222-1

Security update for systemd

No scoreFix available

openSUSE-SU-2026:21222-1 is a vulnerability with no CVSS score yet in systemd, published July 3, 2026. No source lists public exploit code. Fixed in systemd 257.13-160000.2.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
257.13-160000.2.1systemd +1 more

Description

This update for systemd fixes the following issues:

Changes in systemd:

  • Better handle TLS allocation failure (bsc#1254924).
  • Disable mounting debugfs by default (jsc#PED-8812).
  • Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647 bsc#1267644 bsc#1262305 bsc#1263117).
  • Move systemd-pcrlock out from the experimental sub-package to udev (bsc#1248261 jsc#PED-15946).
  • Add a weak runtime dependency on libtss2-tcti-device0 (bsc#1260357).
  • Import commit 59336000ef7850eba0963c6a690ff3371c425929 (bsc#1261982 bsc#1261983).
  • Add a weak runtime dependency on polkit (bsc#1259071).
  • systemd-update-helper: fix the clean-state command only removing $STATE_DIR/system instead of $STATE_DIR/.
  • systemd-update-helper: add --root option for testing convenience.
  • systemd-update-helper: fix incorrect skipping of systemctl disable during package removal (bsc#1245551).
  • systemd-update-helper: fix do_install_units() incorrectly returning 1 when no units need preset.
  • systemd.spec: introduce %bcond_without docs to allow skipping man pages and devel-doc.
  • systemd.spec: drop the %{release} number from the SBAT version (bsc#1251948).

Affected packages

Affected packages
PackageAffectedFixed
systemd
openSUSE:Leap 16.0
before 257.13-160000.2.1
257.13-160000.2.1
systemd-mini
openSUSE:Leap 16.0
before 257.13-160000.2.1
257.13-160000.2.1

What each source reports

OSVNo score

Security update for systemd

This update for systemd fixes the following issues:

Changes in systemd:

  • Better handle TLS allocation failure (bsc#1254924).
  • Disable mounting debugfs by default (jsc#PED-8812).
  • Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647 bsc#1267644 bsc#1262305 bsc#1263117).
  • Move systemd-pcrlock out from the experimental sub-package to udev (bsc#1248261 jsc#PED-15946).
  • Add a weak runtime dependency on libtss2-tcti-device0 (bsc#1260357).
  • Import commit 59336000ef7850eba0963c6a690ff3371c425929 (bsc#1261982 bsc#1261983).
  • Add a weak runtime dependency on polkit (bsc#1259071).
  • systemd-update-helper: fix the clean-state command only removing $STATE_DIR/system instead of $STATE_DIR/.
  • systemd-update-helper: add --root option for testing convenience.
  • systemd-update-helper: fix incorrect skipping of systemctl disable during package removal (bsc#1245551).
  • systemd-update-helper: fix do_install_units() incorrectly returning 1 when no units need preset.
  • systemd.spec: introduce %bcond_without docs to allow skipping man pages and devel-doc.
  • systemd.spec: drop the %{release} number from the SBAT version (bsc#1251948).
Record
openSUSE-SU-2026:21222-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 6 moreShow less
MoveEnter Open