UbuntuUpdates.org

Package "systemd-ukify"

Name: systemd-ukify

Description:

tool to build Unified Kernel Images
Latest version: 255.4-1ubuntu8.18
Release: noble (24.04)
Level: updates
Repository: universe
Head package: systemd
Homepage: https://www.freedesktop.org/wiki/Software/systemd

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "systemd-ukify"

All arch deb package
APT INSTALL

Other versions of "systemd-ukify" in Noble

Repository Area Version
base universe 255.4-1ubuntu8
security universe 255.4-1ubuntu8.18

Changelog

Version: 255.4-1ubuntu8.18 2026-10-21 09:07:53 UTC

systemd (255.4-1ubuntu8.18) noble-security; urgency=medium

  * d/p/lp2170538-resolved-pick-up-new-DNSSEC-KSK-from-2024.patch: add
    the root zone KSK-2024 (key tag 38696) to the built-in DNSSEC trust
    anchor. Since 2026-10-11 the root DNSKEY RRset is signed only by
    this key, so with DNSSEC enabled and no local trust anchor file
    every lookup failed with "missing-key" (LP: #2170538)

 -- CyberNative AI LLC Mon, 12 Oct 2026 07:36:16 +0000
Source diff to previous version
2170538 Ubuntu 24.04: systemd-resolved DNSSEC fails after root KSK rollover; built-in trust anchor lacks key 38696

Version: 255.4-1ubuntu8.17 2026-08-10 17:08:41 UTC
No changelog available yet.
Source diff to previous version

Version: 255.4-1ubuntu8.16 2026-06-08 19:07:39 UTC

  systemd (255.4-1ubuntu8.16) noble-security; urgency=medium

  * SECURITY UPDATE: escape-to-host via malformed optional config file
    - debian/patches/CVE-2026-40226-1.patch: nspawn: apply BindUser/Ephemeral
      from settings file only if trusted in src/nspawn/nspawn.c.
    - debian/patches/CVE-2026-40226-2.patch: nspawn: normalize pivot_root paths
      in src/nspawn/nspawn-mount.c.
    - CVE-2026-40226

 -- Marc Deslauriers <email address hidden> Fri, 05 Jun 2026 11:36:29 -0400
Source diff to previous version
CVE-2026-40226 In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Version: 255.4-1ubuntu8.15 2026-04-08 06:08:10 UTC

  systemd (255.4-1ubuntu8.15) noble; urgency=medium

  [ Robert Malz ]
  * network: also check ID_NET_MANAGED_BY property on reconfigure
    (LP: #2133159)
  * net_id: depending on new udev prop, include/exclude PCI domain from netif names
    (LP: #2134334)

  [ Ioana Lazea ]
  * timer: don't run service immediately after restart of a timer (LP: #2141296)

 -- Robert Malz <email address hidden> Tue, 24 Mar 2026 09:45:53 -0400
Source diff to previous version
2133159 systemd-networkd does not respect ID_NET_MANAGED_BY in all cases
2134334 Add ID_NET_NAME_INCLUDE_DOMAIN property support to systemd
2141296 [00427578] Restarting systemd timer triggers service start off-schedule

Version: 255.4-1ubuntu8.14 2026-03-24 09:08:02 UTC

  systemd (255.4-1ubuntu8.14) noble-security; urgency=medium

  * SECURITY UPDATE: Local unprivileged user can trigger an assert in systemd
    - d/p/CVE-2026-29111-1.patch: path-util: add flavour of path_startswith() that leaves
      a leading slash in place
    - d/p/CVE-2026-29111-2.patch: path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag
    - d/p/CVE-2026-29111-3.patch: core/cgroup: avoid one unnecessary strjoina()
    - d/p/CVE-2026-29111-4.patch: core: validate input cgroup path more prudently
  * SECURITY UPDATE: Local root execution via malicious hardware devices
    - d/p/udev-check-for-invalid-chars-in-various-fields-received-f.patch
    - d/p/udev-fix-review-mixup.patch
    - No CVE number

 -- Nick Rosbrook <email address hidden> Fri, 13 Mar 2026 12:48:42 -0400
CVE-2026-29111 systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.


About   -   Send Feedback to @ubuntu_updates