Ubuntu alert USN-8402-1 (systemd)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8402-1] systemd vulnerabilities
Date:
             
 
Mon, 08 Jun 2026 15:34:07 +0000
Message-ID:
             
 
<E1wWbzL-0006kb-C9@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8402-1
June 08, 2026

systemd vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in systemd.

Software Description:
- systemd: system and service manager

Details:

It was discovered that systemd-nspawn incorrectly handled certain optional
configuration files. A local attacker could possibly use this issue to
escape to the host system and execute arbitrary code. (CVE-2026-40226)

It was discovered that systemd-resolved incorrectly validated DNSSEC
records for signed domains. An attacker could possibly use this issue to
manipulate DNS records. This issue only affected Ubuntu 22.04 LTS.
(CVE-2023-7008)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  libsystemd0                     257.9-0ubuntu2.5
  libudev1                        257.9-0ubuntu2.5
  systemd                         257.9-0ubuntu2.5
  udev                            257.9-0ubuntu2.5

Ubuntu 24.04 LTS
  libsystemd0                     255.4-1ubuntu8.16
  libudev1                        255.4-1ubuntu8.16
  systemd                         255.4-1ubuntu8.16
  udev                            255.4-1ubuntu8.16

Ubuntu 22.04 LTS
  libnss-resolve                  249.11-0ubuntu3.21
  libsystemd0                     249.11-0ubuntu3.21
  libudev1                        249.11-0ubuntu3.21
  systemd                         249.11-0ubuntu3.21
  udev                            249.11-0ubuntu3.21

After a standard system update you need to reboot your computer to make all
the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8402-1
  CVE-2023-7008, CVE-2026-40226

Package Information:
  https://launchpad.net/ubuntu/+source/systemd/257.9-0ubunt...
  https://launchpad.net/ubuntu/+source/systemd/255.4-1ubunt...
  https://launchpad.net/ubuntu/+source/systemd/249.11-0ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=C2Ms
-----END PGP SIGNATURE-----