[CLSA-2026:1784813658] systemd: Fix of CVE-2026-29111
Type:
security
Severity:
Important
Release date:
2026-07-23 13:34:44 UTC
Description:
- CVE-2026-29111: validate the control group path in the GetUnitByControlGroup D-Bus method, rejecting non-absolute or non-normalized input to prevent stack exhaustion from an oversized, attacker-controlled string - Skip the test-fs-util symlink touch_file check when the build kernel does not support chmod() on a symlink (-EOPNOTSUPP), so the build's test phase no longer aborts during the package build
CVEs fixed:
Updated packages:
  • systemd-239-51.el8_5.2.tuxcare.els6.i686.rpm
    sha:32376c2bcbe31f603fc4b89d19788905d41c7cc0f1b8a3b2a0a3eede9a22d61f
  • systemd-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:25b8f5e2dea07cc4151685c5842c428a7a727f2d95b16b00ae7b1b0b71fbd6a4
  • systemd-container-239-51.el8_5.2.tuxcare.els6.i686.rpm
    sha:1f44cd60db47a2eb910a86f3eb0f0f18c237fde76d93da9ea11813db736bc842
  • systemd-container-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:1e49a462e8a56bda66f2cd12aa96d2db3cd15b5874430cdef9185b9f78574991
  • systemd-devel-239-51.el8_5.2.tuxcare.els6.i686.rpm
    sha:5fc064dff98b3fb1d21fab4ec8115331bfa87a4813e8d6e9b2c7a6674925a8b0
  • systemd-devel-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:d625c87a65c3847dedfe48a80059183b816667784ef56424ef7139eb36263e8f
  • systemd-journal-remote-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:eb0b560531d2a871c5d9f5452ee889ab229c0079adf37a45784818d3ebed7545
  • systemd-libs-239-51.el8_5.2.tuxcare.els6.i686.rpm
    sha:ed4fbbc095ab902e9d45794ddee782616d0498b3e21f95c56f2d59db44c44591
  • systemd-libs-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:6411054782838d76635ea72a5ddfd576f81ca1defa780142047c959d30df4d20
  • systemd-pam-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:c2d58c08fe9d210600700b2e4e176c9af7d4a0fd5c8e85b07fbf3bd4f2feb6cb
  • systemd-tests-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:0b0dade361cd88704711d1710a53dc05dbe41ac0b36dc57fa84e5222db4550ca
  • systemd-udev-239-51.el8_5.2.tuxcare.els6.x86_64.rpm
    sha:ec15cd41af76c0094cd465fceccab009f0d45f90d0050346f8f3435b446a5fd9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.