ELSA-2026-18153

ELSA-2026-18153 - systemd security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-07-20

Description

[257-23.0.1.el10_2.2]
- Fix detection of Oracle Virtualization or BM envs [Orabug: 37531877]
- Avoid udevadm warnings when using udev valid configs [Orabug: 37503197]
- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]
- set 'RemoveIPC=no' in logind.conf as default [Orabug: 22224874]
- Fix missing netdev for iscsi entry in fstab [Orabug: 25897792]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- Disable unprivileged BPF by default [Orabug: 32870980]
- Remove upstream references [Orabug: 33995357]
- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]
- Removed unneeded patches from the systemd.spec
- 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]
- 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]
- 1006-orabug34467234-shutdown-get-only-active-md-arrays.patch [Orabug: 34467234]
- 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]
- 1008-path-drop-IN_ATTRIB-from-parent-directory-watches.patch [Orabug: 36780432]

[257-23.2]
- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163873)
- nspawn: normalize pivot_root paths (RHEL-163873)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163879)
- udev: ensure there is space for trailing NUL before calling sprintf (RHEL-163879)
- udev: ensure tag parsing stays within bounds (RHEL-163879)
- udev: fix review mixup (RHEL-163879)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163879)
- udev-builtin-net-id: print cescaped bad attributes (RHEL-163879)

[257-23.1]
- ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080)
- ci: add bpftool workaround to codeql job too (RHEL-152080)
- ci: fix workaround about bpftool for codeql (RHEL-152080)
- ci: add bpftool workaround to coverity too (RHEL-152080)
- path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080)
- cgroup: port some code over to path_startswith_full() (RHEL-152080)
- path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080)
- sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080)
- core/cgroup: avoid one unnecessary strjoina() (RHEL-152080)
- core: validate input cgroup path more prudently (RHEL-152080)

Related CVEs

CVE-2025-4598

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	systemd-257-23.0.1.el10_2.2.src.rpm	b9099959e7dd3a5d4ec7b12e402b0d056bb33a8bdabb0ec81ba1448b7882ff79	-	ol10_aarch64_appstream
	systemd-257-23.0.1.el10_2.2.src.rpm	b9099959e7dd3a5d4ec7b12e402b0d056bb33a8bdabb0ec81ba1448b7882ff79	-	ol10_aarch64_baseos_latest
	systemd-257-23.0.1.el10_2.2.src.rpm	b9099959e7dd3a5d4ec7b12e402b0d056bb33a8bdabb0ec81ba1448b7882ff79	-	ol10_aarch64_u2_baseos_patch
	systemd-257-23.0.1.el10_2.2.aarch64.rpm	b7b355aa5aca4e04206af396378d13801e5ec6bcb013071ca863863a935111be	-	ol10_aarch64_baseos_latest
	systemd-257-23.0.1.el10_2.2.aarch64.rpm	b7b355aa5aca4e04206af396378d13801e5ec6bcb013071ca863863a935111be	-	ol10_aarch64_u2_baseos_patch
	systemd-boot-unsigned-257-23.0.1.el10_2.2.aarch64.rpm	3e978e4e41c681831c333396cf92c22a76a784bce3923b956df221e223d895a3	-	ol10_aarch64_appstream
	systemd-container-257-23.0.1.el10_2.2.aarch64.rpm	a709c6443161732ae23bad67c05fd63fc30edd016a142fdbc5290e84a54f4c20	-	ol10_aarch64_baseos_latest
	systemd-container-257-23.0.1.el10_2.2.aarch64.rpm	a709c6443161732ae23bad67c05fd63fc30edd016a142fdbc5290e84a54f4c20	-	ol10_aarch64_u2_baseos_patch
	systemd-devel-257-23.0.1.el10_2.2.aarch64.rpm	4269714f15b7dd343aabfcdb54962fc8428d77601cfb5e2c8fe90d1f4ca14754	-	ol10_aarch64_appstream
	systemd-journal-remote-257-23.0.1.el10_2.2.aarch64.rpm	d7efbabafa39b96c972d7ce8f6a1a7497d354f5617605eaa2a293fa6366f01b5	-	ol10_aarch64_appstream
	systemd-libs-257-23.0.1.el10_2.2.aarch64.rpm	729f27382090ed0caac417f1420dfdc82dff9d655c76222a165af6e312856372	-	ol10_aarch64_baseos_latest
	systemd-libs-257-23.0.1.el10_2.2.aarch64.rpm	729f27382090ed0caac417f1420dfdc82dff9d655c76222a165af6e312856372	-	ol10_aarch64_u2_baseos_patch
	systemd-oomd-257-23.0.1.el10_2.2.aarch64.rpm	8909f3499a10ad901b0c12228136788082ff76ae2ed01e0fc25424b4b854a17e	-	ol10_aarch64_baseos_latest
	systemd-oomd-257-23.0.1.el10_2.2.aarch64.rpm	8909f3499a10ad901b0c12228136788082ff76ae2ed01e0fc25424b4b854a17e	-	ol10_aarch64_u2_baseos_patch
	systemd-pam-257-23.0.1.el10_2.2.aarch64.rpm	7b887588ad6c1925b79a2666165feb475c64a5826b797ea305e3644b65f6cd0b	-	ol10_aarch64_baseos_latest
	systemd-pam-257-23.0.1.el10_2.2.aarch64.rpm	7b887588ad6c1925b79a2666165feb475c64a5826b797ea305e3644b65f6cd0b	-	ol10_aarch64_u2_baseos_patch
	systemd-resolved-257-23.0.1.el10_2.2.aarch64.rpm	79adced8569bbea2738bce527d62f68c472ba06ef0642f87e263373b16632baf	-	ol10_aarch64_baseos_latest
	systemd-resolved-257-23.0.1.el10_2.2.aarch64.rpm	79adced8569bbea2738bce527d62f68c472ba06ef0642f87e263373b16632baf	-	ol10_aarch64_u2_baseos_patch
	systemd-rpm-macros-257-23.0.1.el10_2.2.noarch.rpm	f004bde2d2f7e13bf26d15c908602c8be31126434304d540bbe44a9c536302b6	-	ol10_aarch64_baseos_latest
	systemd-rpm-macros-257-23.0.1.el10_2.2.noarch.rpm	f004bde2d2f7e13bf26d15c908602c8be31126434304d540bbe44a9c536302b6	-	ol10_aarch64_u2_baseos_patch
	systemd-udev-257-23.0.1.el10_2.2.aarch64.rpm	0d2fa82d21237ab51d24dc79adf6ddf4ce00cab5fa4712346ce6c1fde1a3bd88	-	ol10_aarch64_baseos_latest
	systemd-udev-257-23.0.1.el10_2.2.aarch64.rpm	0d2fa82d21237ab51d24dc79adf6ddf4ce00cab5fa4712346ce6c1fde1a3bd88	-	ol10_aarch64_u2_baseos_patch
	systemd-ukify-257-23.0.1.el10_2.2.noarch.rpm	67f3f479ab54ebe17fca700839999efec12457de84f5db4cba04c34799e58da8	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	systemd-257-23.0.1.el10_2.2.src.rpm	b9099959e7dd3a5d4ec7b12e402b0d056bb33a8bdabb0ec81ba1448b7882ff79	-	ol10_x86_64_appstream
	systemd-257-23.0.1.el10_2.2.src.rpm	b9099959e7dd3a5d4ec7b12e402b0d056bb33a8bdabb0ec81ba1448b7882ff79	-	ol10_x86_64_baseos_latest
	systemd-257-23.0.1.el10_2.2.src.rpm	b9099959e7dd3a5d4ec7b12e402b0d056bb33a8bdabb0ec81ba1448b7882ff79	-	ol10_x86_64_u2_baseos_patch
	systemd-257-23.0.1.el10_2.2.x86_64.rpm	8e9ba8b751b1a9c1706e15edd0679f21f66b48c45e8bc0b8551c8a6d6f0de9ef	-	ol10_x86_64_baseos_latest
	systemd-257-23.0.1.el10_2.2.x86_64.rpm	8e9ba8b751b1a9c1706e15edd0679f21f66b48c45e8bc0b8551c8a6d6f0de9ef	-	ol10_x86_64_u2_baseos_patch
	systemd-boot-unsigned-257-23.0.1.el10_2.2.x86_64.rpm	af7417e3e7fe2d147176e2d7e55d2898b73886a6cf13f800f29c0805a0db3ac2	-	ol10_x86_64_appstream
	systemd-container-257-23.0.1.el10_2.2.x86_64.rpm	7ace08f043472cfd58a9685241b8011a63c40b7b5f3c1aa40fcdd4de846eecb4	-	ol10_x86_64_baseos_latest
	systemd-container-257-23.0.1.el10_2.2.x86_64.rpm	7ace08f043472cfd58a9685241b8011a63c40b7b5f3c1aa40fcdd4de846eecb4	-	ol10_x86_64_u2_baseos_patch
	systemd-devel-257-23.0.1.el10_2.2.x86_64.rpm	11c6aaab905d219a9e685f7da0f17670b47a5df69ec71d6e958945f9ce29c0f3	-	ol10_x86_64_appstream
	systemd-journal-remote-257-23.0.1.el10_2.2.x86_64.rpm	f28b8f13e5c4b4870336b0a2b578b89fbe7a0bcb915d1cf4ed5a2d5feee96fa7	-	ol10_x86_64_appstream
	systemd-libs-257-23.0.1.el10_2.2.x86_64.rpm	37558aaa81325bb10956151773bea0439dbe3ffa527661aee13828f5c9a491a1	-	ol10_x86_64_baseos_latest
	systemd-libs-257-23.0.1.el10_2.2.x86_64.rpm	37558aaa81325bb10956151773bea0439dbe3ffa527661aee13828f5c9a491a1	-	ol10_x86_64_u2_baseos_patch
	systemd-oomd-257-23.0.1.el10_2.2.x86_64.rpm	d567264d5930327fed8430e318e4c53d20d6b8493dbcd2cbd26120e93728205e	-	ol10_x86_64_baseos_latest
	systemd-oomd-257-23.0.1.el10_2.2.x86_64.rpm	d567264d5930327fed8430e318e4c53d20d6b8493dbcd2cbd26120e93728205e	-	ol10_x86_64_u2_baseos_patch
	systemd-pam-257-23.0.1.el10_2.2.x86_64.rpm	c15c5c9f0c9f76ca581f797df3dbb40b105af0b4a7f3086c3fa712c69ab2d3fa	-	ol10_x86_64_baseos_latest
	systemd-pam-257-23.0.1.el10_2.2.x86_64.rpm	c15c5c9f0c9f76ca581f797df3dbb40b105af0b4a7f3086c3fa712c69ab2d3fa	-	ol10_x86_64_u2_baseos_patch
	systemd-resolved-257-23.0.1.el10_2.2.x86_64.rpm	835f63055f10007491560a4ad09d00028db8bd31b5cc812dff69883d6168fa4b	-	ol10_x86_64_baseos_latest
	systemd-resolved-257-23.0.1.el10_2.2.x86_64.rpm	835f63055f10007491560a4ad09d00028db8bd31b5cc812dff69883d6168fa4b	-	ol10_x86_64_u2_baseos_patch
	systemd-rpm-macros-257-23.0.1.el10_2.2.noarch.rpm	f004bde2d2f7e13bf26d15c908602c8be31126434304d540bbe44a9c536302b6	-	ol10_x86_64_baseos_latest
	systemd-rpm-macros-257-23.0.1.el10_2.2.noarch.rpm	f004bde2d2f7e13bf26d15c908602c8be31126434304d540bbe44a9c536302b6	-	ol10_x86_64_u2_baseos_patch
	systemd-udev-257-23.0.1.el10_2.2.x86_64.rpm	e59e9a34e2c52e4b74d0a4316963b3ad55b8446964aa4a1e338ff55dfb27fa68	-	ol10_x86_64_baseos_latest
	systemd-udev-257-23.0.1.el10_2.2.x86_64.rpm	e59e9a34e2c52e4b74d0a4316963b3ad55b8446964aa4a1e338ff55dfb27fa68	-	ol10_x86_64_u2_baseos_patch
	systemd-ukify-257-23.0.1.el10_2.2.noarch.rpm	67f3f479ab54ebe17fca700839999efec12457de84f5db4cba04c34799e58da8	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team