ELSA-2026-13651

ELSA-2026-13651 - systemd security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-05-05

Description

[257-13.0.1.el10_1.3]
- Fix detection of Oracle Virtualization or BM envs [Orabug: 37531877]
- Avoid udevadm warnings when using udev valid configs [Orabug: 37503197]
- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]
- set 'RemoveIPC=no' in logind.conf as default [Orabug: 22224874]
- Fix missing netdev for iscsi entry in fstab [Orabug: 25897792]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- Disable unprivileged BPF by default [Orabug: 32870980]
- Remove upstream references [Orabug: 33995357]
- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]
- Removed unneeded patches from the systemd.spec
- 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]
- 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]
- 1006-orabug34467234-shutdown-get-only-active-md-arrays.patch [Orabug: 34467234]
- 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]
- 1008-path-drop-IN_ATTRIB-from-parent-directory-watches.patch [Orabug: 36780432]

[257-13.3]
- ci: re-enable bpf-framework option for build and unit test jobs (RHEL-155394)
- ci: add bpftool workaround to codeql job too (RHEL-155394)
- ci: fix workaround about bpftool for codeql (RHEL-155394)
- ci: add bpftool workaround to coverity too (RHEL-155394)
- ci: pin Packit/mkosi to the latest RHEL 10.1 commit (RHEL-155394)
- ci: run apt-get update before running mkosi (RHEL-155394)
- path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-155394)
- cgroup: port some code over to path_startswith_full() (RHEL-155394)
- path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-155394)
- sd-json: fix off-by-one issue when updating parent for array elements (RHEL-155394)
- core/cgroup: avoid one unnecessary strjoina() (RHEL-155394)
- core: validate input cgroup path more prudently (RHEL-155394)

[257-13.2]
- Revert 'coredump: fix 0-passed-as-pointer warning' (RHEL-104135)
- Revert 'Define helper to call PR_SET_DUMPABLE' (RHEL-104135)
- Revert 'coredump: introduce an enum to wrap dumpable constants' (RHEL-104135)
- Revert 'coredump: when %F/pidfd is used, again allow forwarding to containers' (RHEL-104135)
- Revert 'coredump: add support for new %F PIDFD specifier' (RHEL-104135)
- Revert 'coredump: get rid of a bogus assertion' (RHEL-104135)
- Revert 'coredump: also stop forwarding non-dumpable processes' (RHEL-104135)
- Revert 'coredump: use %d in kernel core pattern' (RHEL-104135)
- Revert 'coredump: get rid of _META_MANDATORY_MAX' (RHEL-104135)
- Revert 'coredump: wrap long lines, fix grammar in comments' (RHEL-104135)
- Revert 'coredump: restore compatibility with older patterns' (RHEL-104135)
- Revert 'coredump: verify pidfd after parsing data in usermode helper' (RHEL-104135)

[257-13.1]
- coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
- coredump: restore compatibility with older patterns (RHEL-104135)
- coredump: wrap long lines, fix grammar in comments (RHEL-104135)
- coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
- coredump: use %d in kernel core pattern (RHEL-104135)
- coredump: also stop forwarding non-dumpable processes (RHEL-104135)
- coredump: get rid of a bogus assertion (RHEL-104135)
- coredump: add support for new %F PIDFD specifier (RHEL-104135)
- coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
- coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
- Define helper to call PR_SET_DUMPABLE (RHEL-104135)
- coredump: fix 0-passed-as-pointer warning (RHEL-104135)

Related CVEs

CVE-2026-29111

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	systemd-257-13.0.1.el10_1.3.src.rpm	2a6f2967e0b05840469fbebf6946f2a84842eb5965ab2d0ee9a7e47895dbec93	-	ol10_aarch64_appstream
	systemd-257-13.0.1.el10_1.3.src.rpm	2a6f2967e0b05840469fbebf6946f2a84842eb5965ab2d0ee9a7e47895dbec93	-	ol10_aarch64_baseos_latest
	systemd-257-13.0.1.el10_1.3.src.rpm	2a6f2967e0b05840469fbebf6946f2a84842eb5965ab2d0ee9a7e47895dbec93	-	ol10_aarch64_u1_baseos_patch
	systemd-257-13.0.1.el10_1.3.aarch64.rpm	9f560e5a3aefe1ce02bdca4c9c929f32be6f815274dd98af7eb8c45670dfeb17	-	ol10_aarch64_baseos_latest
	systemd-257-13.0.1.el10_1.3.aarch64.rpm	9f560e5a3aefe1ce02bdca4c9c929f32be6f815274dd98af7eb8c45670dfeb17	-	ol10_aarch64_u1_baseos_patch
	systemd-boot-unsigned-257-13.0.1.el10_1.3.aarch64.rpm	5b0c540eb3cb29b80588300afc1137e2b2e89d153091d859d622f04cd9cf7dab	-	ol10_aarch64_appstream
	systemd-container-257-13.0.1.el10_1.3.aarch64.rpm	da641a13c4d8c3062815ff7ee55050b1adfd63c3dc980597ab67256fac0d4395	-	ol10_aarch64_baseos_latest
	systemd-container-257-13.0.1.el10_1.3.aarch64.rpm	da641a13c4d8c3062815ff7ee55050b1adfd63c3dc980597ab67256fac0d4395	-	ol10_aarch64_u1_baseos_patch
	systemd-devel-257-13.0.1.el10_1.3.aarch64.rpm	748bb7315e903e56121b1f2c22742fdb7520c299cebe43785afa18ec330c3cf4	-	ol10_aarch64_appstream
	systemd-journal-remote-257-13.0.1.el10_1.3.aarch64.rpm	60c33389a98596eaa17929c60c64e682a67e6f4186b9560c61898068f3d8a3bc	-	ol10_aarch64_appstream
	systemd-libs-257-13.0.1.el10_1.3.aarch64.rpm	c959ab73b831f6fac119abc48a660c8dbe71fdacffc5cccbaf04cd36cb984e40	-	ol10_aarch64_baseos_latest
	systemd-libs-257-13.0.1.el10_1.3.aarch64.rpm	c959ab73b831f6fac119abc48a660c8dbe71fdacffc5cccbaf04cd36cb984e40	-	ol10_aarch64_u1_baseos_patch
	systemd-oomd-257-13.0.1.el10_1.3.aarch64.rpm	6e71f996924109a9098e960daab8f947ef5b4e6135be071b84e887b84fd0f3d8	-	ol10_aarch64_baseos_latest
	systemd-oomd-257-13.0.1.el10_1.3.aarch64.rpm	6e71f996924109a9098e960daab8f947ef5b4e6135be071b84e887b84fd0f3d8	-	ol10_aarch64_u1_baseos_patch
	systemd-pam-257-13.0.1.el10_1.3.aarch64.rpm	2c71090d0a3d9878327978b2437a9f654c0448bcb7afd9092f4762eda197c9ce	-	ol10_aarch64_baseos_latest
	systemd-pam-257-13.0.1.el10_1.3.aarch64.rpm	2c71090d0a3d9878327978b2437a9f654c0448bcb7afd9092f4762eda197c9ce	-	ol10_aarch64_u1_baseos_patch
	systemd-resolved-257-13.0.1.el10_1.3.aarch64.rpm	985a428c8a7f23825cad4df36e84ec1c7ea116f16ff11e156e51d7eaa4cec89a	-	ol10_aarch64_baseos_latest
	systemd-resolved-257-13.0.1.el10_1.3.aarch64.rpm	985a428c8a7f23825cad4df36e84ec1c7ea116f16ff11e156e51d7eaa4cec89a	-	ol10_aarch64_u1_baseos_patch
	systemd-rpm-macros-257-13.0.1.el10_1.3.noarch.rpm	95513bd15c572c79f95367130dc20c4ed1c81913dc005a69dd5e9b4c4b040598	-	ol10_aarch64_baseos_latest
	systemd-rpm-macros-257-13.0.1.el10_1.3.noarch.rpm	95513bd15c572c79f95367130dc20c4ed1c81913dc005a69dd5e9b4c4b040598	-	ol10_aarch64_u1_baseos_patch
	systemd-udev-257-13.0.1.el10_1.3.aarch64.rpm	8eeb758808b7d354bcdce0f69930c71c6dc0a573770430c7206bfc97fd136c42	-	ol10_aarch64_baseos_latest
	systemd-udev-257-13.0.1.el10_1.3.aarch64.rpm	8eeb758808b7d354bcdce0f69930c71c6dc0a573770430c7206bfc97fd136c42	-	ol10_aarch64_u1_baseos_patch
	systemd-ukify-257-13.0.1.el10_1.3.noarch.rpm	ed8b5fd772c1e9aeeccbd5181e456602e3a49ca5b2e76125e720f79c0aa40d59	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	systemd-257-13.0.1.el10_1.3.src.rpm	2a6f2967e0b05840469fbebf6946f2a84842eb5965ab2d0ee9a7e47895dbec93	-	ol10_x86_64_appstream
	systemd-257-13.0.1.el10_1.3.src.rpm	2a6f2967e0b05840469fbebf6946f2a84842eb5965ab2d0ee9a7e47895dbec93	-	ol10_x86_64_baseos_latest
	systemd-257-13.0.1.el10_1.3.src.rpm	2a6f2967e0b05840469fbebf6946f2a84842eb5965ab2d0ee9a7e47895dbec93	-	ol10_x86_64_u1_baseos_patch
	systemd-257-13.0.1.el10_1.3.x86_64.rpm	668b0296257569d54b05c06254baba7d323fee0c80185eb446eae5455dd03e80	-	ol10_x86_64_baseos_latest
	systemd-257-13.0.1.el10_1.3.x86_64.rpm	668b0296257569d54b05c06254baba7d323fee0c80185eb446eae5455dd03e80	-	ol10_x86_64_u1_baseos_patch
	systemd-boot-unsigned-257-13.0.1.el10_1.3.x86_64.rpm	7774ee318fa29bb4c28288af559d2a8be75710046146fcfe16a38dba93292c62	-	ol10_x86_64_appstream
	systemd-container-257-13.0.1.el10_1.3.x86_64.rpm	7c609b6a596500e7d49c79757a66a63a8b2cf23cf927df444d7ddb69d565a7dc	-	ol10_x86_64_baseos_latest
	systemd-container-257-13.0.1.el10_1.3.x86_64.rpm	7c609b6a596500e7d49c79757a66a63a8b2cf23cf927df444d7ddb69d565a7dc	-	ol10_x86_64_u1_baseos_patch
	systemd-devel-257-13.0.1.el10_1.3.x86_64.rpm	1bd50e6502c86861f6b388c1d629ba6e6ced1760c08c235dc2039ada5a292ce9	-	ol10_x86_64_appstream
	systemd-journal-remote-257-13.0.1.el10_1.3.x86_64.rpm	4d1c58bb08a8c895fd660e77c91de381cdc4a337e5174dc1fab06f0944e3959f	-	ol10_x86_64_appstream
	systemd-libs-257-13.0.1.el10_1.3.x86_64.rpm	77232de467d5c53bef54c4a2ce909135579e5685deb6237b5655705578b17e3d	-	ol10_x86_64_baseos_latest
	systemd-libs-257-13.0.1.el10_1.3.x86_64.rpm	77232de467d5c53bef54c4a2ce909135579e5685deb6237b5655705578b17e3d	-	ol10_x86_64_u1_baseos_patch
	systemd-oomd-257-13.0.1.el10_1.3.x86_64.rpm	08e41aba3acb12a26d720e23a8e7c66ff5637b201cc75b91ef08c28dac9a7c3f	-	ol10_x86_64_baseos_latest
	systemd-oomd-257-13.0.1.el10_1.3.x86_64.rpm	08e41aba3acb12a26d720e23a8e7c66ff5637b201cc75b91ef08c28dac9a7c3f	-	ol10_x86_64_u1_baseos_patch
	systemd-pam-257-13.0.1.el10_1.3.x86_64.rpm	ceb4c71e817a596da779f560c2fd9cacc937ef6d518c59c3428b12a93a49cd02	-	ol10_x86_64_baseos_latest
	systemd-pam-257-13.0.1.el10_1.3.x86_64.rpm	ceb4c71e817a596da779f560c2fd9cacc937ef6d518c59c3428b12a93a49cd02	-	ol10_x86_64_u1_baseos_patch
	systemd-resolved-257-13.0.1.el10_1.3.x86_64.rpm	a28e9a92d72f88983a2cb511ca32cff4a7d9059503dedf4a7592eb15b91acb2d	-	ol10_x86_64_baseos_latest
	systemd-resolved-257-13.0.1.el10_1.3.x86_64.rpm	a28e9a92d72f88983a2cb511ca32cff4a7d9059503dedf4a7592eb15b91acb2d	-	ol10_x86_64_u1_baseos_patch
	systemd-rpm-macros-257-13.0.1.el10_1.3.noarch.rpm	95513bd15c572c79f95367130dc20c4ed1c81913dc005a69dd5e9b4c4b040598	-	ol10_x86_64_baseos_latest
	systemd-rpm-macros-257-13.0.1.el10_1.3.noarch.rpm	95513bd15c572c79f95367130dc20c4ed1c81913dc005a69dd5e9b4c4b040598	-	ol10_x86_64_u1_baseos_patch
	systemd-udev-257-13.0.1.el10_1.3.x86_64.rpm	6e014db71112db90fc2edca2c82764a9d6ba92c5634d7912212e5a57379bd193	-	ol10_x86_64_baseos_latest
	systemd-udev-257-13.0.1.el10_1.3.x86_64.rpm	6e014db71112db90fc2edca2c82764a9d6ba92c5634d7912212e5a57379bd193	-	ol10_x86_64_u1_baseos_patch
	systemd-ukify-257-13.0.1.el10_1.3.noarch.rpm	ed8b5fd772c1e9aeeccbd5181e456602e3a49ca5b2e76125e720f79c0aa40d59	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team