This bug was fixed in the package systemd - 257.9-0ubuntu2.5
---------------
systemd (257.9-0ubuntu2.5) questing-security; urgency=medium
* SECURITY UPDATE: escape-to-host via malformed optional config file
- debian/patches/CVE-2026-40226-1.patch: nspawn: apply BindUser/Ephemeral
from settings file only if trusted in src/nspawn/nspawn.c.
- debian/patches/CVE-2026-40226-2.patch: nspawn: normalize pivot_root paths
in src/nspawn/nspawn-mount.c.
- CVE-2026-40226
* d/p/lp2155132-*: trim null bytes padding from verity.sig files
(LP: #2155132)
-- Marc Deslauriers <[email protected]> Fri, 05 Jun 2026
11:35:15 -0400
** Changed in: systemd (Ubuntu Questing)
Status: New => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-40226
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155132
Title:
systemd upstream test falling apart in resolute (maybe due to jq)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/jq/+bug/2155132/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
