ELSA-2026-13677

ELSA-2026-13677 - systemd security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-05-05

Description

[252-55.0.3.el9_7.9]
- serialize: don't allocate 1M on the stack just like that [LINUX-16166]
- Route logs from container mapped uids to the system journal [Orabug: 38135007]
- Drop delay when nspawn fails to reset loginuid [Orabug: 37793135]
- Improve logging for api bus connection and subscribers [Orabug: 38040980]
- Defer processing of timeout events in sd-bus api [Orabug: 38064217]
- coredump: use %d in kernel core pattern - CVE-2025-4598
- Add bus description to sd-bus outgoing sockets [Orabug: 37347576]
- Add log messages about daemon-reload requester and duration [Orabug: 37347576]
- Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224]
- 1A) Fix local-fs and remote-fs targets during system boot (replaces old Orabug: 25897792) [Orabug: 36269319]
- 1B) Add 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319]
- 1C) Add required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]
- 1D) Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]
- Due to a new [Orabug: 36564551] filed on April 29 2024, reverting from back to
- previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- drop IN_ATTRIB from parent directory inotify watches [Orabug: 37118224]
- Reverted back to previous Tony Lam patch [Orabug: 25897792] until issue with [Orabug: 36564551] is resolved.
- Re-Added 1001-Fix-missing-netdev-for-iscsi-entry-in-fstab.patch [Orabug: 25897792]
- Backport upstream pstore dmesg fix [Orabug: 34868110]
- Remove upstream references [Orabug: 33995357]
- Disable unprivileged BPF by default [Orabug: 32870980]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874]
- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]
- shutdown: get only active md arrays. [Orabug: 34467234]
- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]
- Removed unneeded patches from the systemd.spec
- 1A) 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]
- 1B) 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]
- 1C) 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]
- Removed the following, associated with [Orabug: 36269319]:
- 2A) Remove 1001-systemd-fstab-generator-reload-targets.patch
- 2B) Remove Fix local-fs and remote-fs targets during system boot [Orabug: 36269319]
- 2C) Remove 'systemd-fstab-generator-reload-targets.service' file [Orabug: 36269319]
- 2D) Remove required rpms for correct kickstart/systemd functionality within systemd.spec [Orabug: 36269319]
- 2E) Remove Important: Review 1001-systemd-fstab-generator-reload-targets.patch for important build details/steps [Orabug: 36269319]

[252-55.9]
- core: validate input cgroup path more prudently (RHEL-155391)

Related CVEs

CVE-2026-29111

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_aarch64_appstream
	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_aarch64_baseos_latest
	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_aarch64_codeready_builder
	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_aarch64_u7_baseos_patch
	rhel-net-naming-sysattrs-252-55.0.3.el9_7.9.noarch.rpm	277591b22c82d08a60272ed1341d64d9684e69e3ef69826c465056e754dcb480	-	ol9_aarch64_baseos_latest
	rhel-net-naming-sysattrs-252-55.0.3.el9_7.9.noarch.rpm	277591b22c82d08a60272ed1341d64d9684e69e3ef69826c465056e754dcb480	-	ol9_aarch64_u7_baseos_patch
	systemd-252-55.0.3.el9_7.9.aarch64.rpm	3bd5af68941d448bd13b805c7d97fe5a72d9b27f2faf4a25831dbedc02f6f9a3	-	ol9_aarch64_baseos_latest
	systemd-252-55.0.3.el9_7.9.aarch64.rpm	3bd5af68941d448bd13b805c7d97fe5a72d9b27f2faf4a25831dbedc02f6f9a3	-	ol9_aarch64_u7_baseos_patch
	systemd-boot-unsigned-252-55.0.3.el9_7.9.aarch64.rpm	34319cf42efe25c5a1dd625839cc6d65f2eea14a734382a8bf87a77bc3b12d72	-	ol9_aarch64_codeready_builder
	systemd-container-252-55.0.3.el9_7.9.aarch64.rpm	71d756e647c86d5ce0f648f903128d61a615ae7394bf91c898a5629eff3faa53	-	ol9_aarch64_baseos_latest
	systemd-container-252-55.0.3.el9_7.9.aarch64.rpm	71d756e647c86d5ce0f648f903128d61a615ae7394bf91c898a5629eff3faa53	-	ol9_aarch64_u7_baseos_patch
	systemd-devel-252-55.0.3.el9_7.9.aarch64.rpm	10d91772b249cf225b5d470c690c8f5b8fed9e5add3bc17ad8958832031e3608	-	ol9_aarch64_appstream
	systemd-journal-remote-252-55.0.3.el9_7.9.aarch64.rpm	5c4d25f9ac2bcf08fafe20970c5156d31f4a6118186166c18f2745ec65262c78	-	ol9_aarch64_appstream
	systemd-libs-252-55.0.3.el9_7.9.aarch64.rpm	8ff0418390808e803c0f37e6c6f8098ff2d396ab8cdc136630326781d9f49e12	-	ol9_aarch64_baseos_latest
	systemd-libs-252-55.0.3.el9_7.9.aarch64.rpm	8ff0418390808e803c0f37e6c6f8098ff2d396ab8cdc136630326781d9f49e12	-	ol9_aarch64_u7_baseos_patch
	systemd-oomd-252-55.0.3.el9_7.9.aarch64.rpm	cb0423b9c93786fadb9c2e76734c0bd495c1243ce597b6aee504fbcdfdd941ec	-	ol9_aarch64_baseos_latest
	systemd-oomd-252-55.0.3.el9_7.9.aarch64.rpm	cb0423b9c93786fadb9c2e76734c0bd495c1243ce597b6aee504fbcdfdd941ec	-	ol9_aarch64_u7_baseos_patch
	systemd-pam-252-55.0.3.el9_7.9.aarch64.rpm	cd4cdc2f93a5f4b54ab5e35cf4f23672530610d715168e371f1a5fe3ab07700d	-	ol9_aarch64_baseos_latest
	systemd-pam-252-55.0.3.el9_7.9.aarch64.rpm	cd4cdc2f93a5f4b54ab5e35cf4f23672530610d715168e371f1a5fe3ab07700d	-	ol9_aarch64_u7_baseos_patch
	systemd-resolved-252-55.0.3.el9_7.9.aarch64.rpm	0be8a7877fe256e6cce9fc9c2f977e543e30d15ec3a39e6c5b8f6782144372ab	-	ol9_aarch64_baseos_latest
	systemd-resolved-252-55.0.3.el9_7.9.aarch64.rpm	0be8a7877fe256e6cce9fc9c2f977e543e30d15ec3a39e6c5b8f6782144372ab	-	ol9_aarch64_u7_baseos_patch
	systemd-rpm-macros-252-55.0.3.el9_7.9.noarch.rpm	c4ffc64615de91463bbff03fdc0c0876f34323e9ce79f19b91c130e6510c835f	-	ol9_aarch64_baseos_latest
	systemd-rpm-macros-252-55.0.3.el9_7.9.noarch.rpm	c4ffc64615de91463bbff03fdc0c0876f34323e9ce79f19b91c130e6510c835f	-	ol9_aarch64_u7_baseos_patch
	systemd-udev-252-55.0.3.el9_7.9.aarch64.rpm	4a3dd4a8acdac23e225518f19aa48a594864e678ff4aa202b276e15ac9305352	-	ol9_aarch64_baseos_latest
	systemd-udev-252-55.0.3.el9_7.9.aarch64.rpm	4a3dd4a8acdac23e225518f19aa48a594864e678ff4aa202b276e15ac9305352	-	ol9_aarch64_u7_baseos_patch
	systemd-ukify-252-55.0.3.el9_7.9.noarch.rpm	7e618aa573f1e8940c0545c1109e925d19121797678f96ef8c2614e48c9fbbbe	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_x86_64_appstream
	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_x86_64_baseos_latest
	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_x86_64_codeready_builder
	systemd-252-55.0.3.el9_7.9.src.rpm	2b287dafae501bc2c09053cfd60ccf1fced17ca7904f128751469ef3da090c82	-	ol9_x86_64_u7_baseos_patch
	rhel-net-naming-sysattrs-252-55.0.3.el9_7.9.noarch.rpm	277591b22c82d08a60272ed1341d64d9684e69e3ef69826c465056e754dcb480	-	ol9_x86_64_baseos_latest
	rhel-net-naming-sysattrs-252-55.0.3.el9_7.9.noarch.rpm	277591b22c82d08a60272ed1341d64d9684e69e3ef69826c465056e754dcb480	-	ol9_x86_64_u7_baseos_patch
	systemd-252-55.0.3.el9_7.9.i686.rpm	d997347fc97858d060a39fe9838386e9563e7e180e5ee6f51ac45879abff768a	-	ol9_x86_64_baseos_latest
	systemd-252-55.0.3.el9_7.9.i686.rpm	d997347fc97858d060a39fe9838386e9563e7e180e5ee6f51ac45879abff768a	-	ol9_x86_64_u7_baseos_patch
	systemd-252-55.0.3.el9_7.9.x86_64.rpm	e357028b98525c72c735364a31294d6195f13c5e278e5fd4b736ff29376130ec	-	ol9_x86_64_baseos_latest
	systemd-252-55.0.3.el9_7.9.x86_64.rpm	e357028b98525c72c735364a31294d6195f13c5e278e5fd4b736ff29376130ec	-	ol9_x86_64_u7_baseos_patch
	systemd-boot-unsigned-252-55.0.3.el9_7.9.x86_64.rpm	31df9a3a0b46b09c9ef9d2e0a90a8544db0e426f804eaa3d47ee92547143ab94	-	ol9_x86_64_codeready_builder
	systemd-container-252-55.0.3.el9_7.9.i686.rpm	9e156ec470631e4a06b4af98bcf065f69ca9e21a648706ce1fc03240cc367603	-	ol9_x86_64_baseos_latest
	systemd-container-252-55.0.3.el9_7.9.i686.rpm	9e156ec470631e4a06b4af98bcf065f69ca9e21a648706ce1fc03240cc367603	-	ol9_x86_64_u7_baseos_patch
	systemd-container-252-55.0.3.el9_7.9.x86_64.rpm	cd6f52d6949cc6c009d86cae62662bde41de2ca6d180b0b513dcd7f231ce0aea	-	ol9_x86_64_baseos_latest
	systemd-container-252-55.0.3.el9_7.9.x86_64.rpm	cd6f52d6949cc6c009d86cae62662bde41de2ca6d180b0b513dcd7f231ce0aea	-	ol9_x86_64_u7_baseos_patch
	systemd-devel-252-55.0.3.el9_7.9.i686.rpm	141740cece6e0e51f5c7e9c806a06b69dced0d2316b306437c84febeee143781	-	ol9_x86_64_appstream
	systemd-devel-252-55.0.3.el9_7.9.x86_64.rpm	26f36e5c69e6ea9460ce0efeeef63ab9521606a206c10e9eaedd86e9a7a98f8b	-	ol9_x86_64_appstream
	systemd-journal-remote-252-55.0.3.el9_7.9.x86_64.rpm	30f1b16a17ae261d29a660fad39bdab382502df74e08ea566c7d16223bfd0268	-	ol9_x86_64_appstream
	systemd-libs-252-55.0.3.el9_7.9.i686.rpm	abfb2a498db0627b2646e760580c2033df08521d47e23a4f6acba71b81eb7910	-	ol9_x86_64_baseos_latest
	systemd-libs-252-55.0.3.el9_7.9.i686.rpm	abfb2a498db0627b2646e760580c2033df08521d47e23a4f6acba71b81eb7910	-	ol9_x86_64_u7_baseos_patch
	systemd-libs-252-55.0.3.el9_7.9.x86_64.rpm	cd8927e873ad81857d68a2ad1b36f754f9ca9c31c255d5de9d7665af95700be2	-	ol9_x86_64_baseos_latest
	systemd-libs-252-55.0.3.el9_7.9.x86_64.rpm	cd8927e873ad81857d68a2ad1b36f754f9ca9c31c255d5de9d7665af95700be2	-	ol9_x86_64_u7_baseos_patch
	systemd-oomd-252-55.0.3.el9_7.9.x86_64.rpm	feec3fc062f49262ef77dc6bc153de5dae0371fde9348dfec577b9ef94ae618a	-	ol9_x86_64_baseos_latest
	systemd-oomd-252-55.0.3.el9_7.9.x86_64.rpm	feec3fc062f49262ef77dc6bc153de5dae0371fde9348dfec577b9ef94ae618a	-	ol9_x86_64_u7_baseos_patch
	systemd-pam-252-55.0.3.el9_7.9.x86_64.rpm	0b9cb0bc02e20156705891556979c038092473e6574e88d2091f75c7b475aca3	-	ol9_x86_64_baseos_latest
	systemd-pam-252-55.0.3.el9_7.9.x86_64.rpm	0b9cb0bc02e20156705891556979c038092473e6574e88d2091f75c7b475aca3	-	ol9_x86_64_u7_baseos_patch
	systemd-resolved-252-55.0.3.el9_7.9.x86_64.rpm	3c4ae15e9a16fca6061289c5db6f6dd46896836aed716de44a7848da795513a7	-	ol9_x86_64_baseos_latest
	systemd-resolved-252-55.0.3.el9_7.9.x86_64.rpm	3c4ae15e9a16fca6061289c5db6f6dd46896836aed716de44a7848da795513a7	-	ol9_x86_64_u7_baseos_patch
	systemd-rpm-macros-252-55.0.3.el9_7.9.noarch.rpm	c4ffc64615de91463bbff03fdc0c0876f34323e9ce79f19b91c130e6510c835f	-	ol9_x86_64_baseos_latest
	systemd-rpm-macros-252-55.0.3.el9_7.9.noarch.rpm	c4ffc64615de91463bbff03fdc0c0876f34323e9ce79f19b91c130e6510c835f	-	ol9_x86_64_u7_baseos_patch
	systemd-udev-252-55.0.3.el9_7.9.x86_64.rpm	8b771e3243159083a1a1a920867cf828c2d7341c73b7f9ed66295b62fd93d710	-	ol9_x86_64_baseos_latest
	systemd-udev-252-55.0.3.el9_7.9.x86_64.rpm	8b771e3243159083a1a1a920867cf828c2d7341c73b7f9ed66295b62fd93d710	-	ol9_x86_64_u7_baseos_patch
	systemd-ukify-252-55.0.3.el9_7.9.noarch.rpm	7e618aa573f1e8940c0545c1109e925d19121797678f96ef8c2614e48c9fbbbe	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team