[ubuntu/jammy-security] systemd 249.11-0ubuntu3.19 (Accepted)

[Marc Deslauriers]

systemd (249.11-0ubuntu3.19) jammy-security; urgency=medium

  * SECURITY UPDATE: Local unprivileged user can overwrite stack in systemd
    - d/p/CVE-2026-29111-1.patch: path-util: backport path_startswith_full
    - d/p/CVE-2026-29111-2.patch: core/cgroup: avoid one unnecessary strjoina()
    - d/p/CVE-2026-29111-3.patch: core: validate input cgroup path more prudently
  * SECURITY UPDATE: Local root execution via malicious hardware devices
    - d/p/udev-check-for-invalid-chars-in-various-fields-received-f.patch
    - d/p/udev-fix-review-mixup.patch
    - No CVE number

systemd (249.11-0ubuntu3.17) jammy; urgency=medium

  [ Nick Rosbrook ]
  * initramfs-tools: copy hwdb.bin to initramfs (LP: #2112237)
  * d/t/tests-in-lxd: drop patching workaround (LP: #2115263)
    - d/t/control: add Depends: dnsmasq-base
      (Revealed by test progressing past previous failure)

  [ Chengen Du ]
  * core/device: fix devlink handling (LP: #2100252)

Date: 2026-03-16 14:35:11.274191+00:00
Changed-By: Nick Rosbrook <nick.rosbrook at canonical.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/systemd/249.11-0ubuntu3.19
-------------- next part --------------
Sorry, changesfile not available.