Fix CVE(s): CVE-2026-29111
* CVE-2026-29111: validate the GetUnitByControlGroup cgroup path - debian/patches/CVE-2026-29111.patch: an unprivileged D-Bus caller could hand PID 1 a cgroup path that is neither absolute nor normalized via the GetUnitByControlGroup method, which on v249 and older overwrites stack memory with attacker-controlled content. Validate with path_is_absolute() and path_is_normalized() before manager_get_unit_by_cgroup(). * test: skip the meson suite on armel - debian/rules: the debian10-els armel worker runs under qemu-user (TCG) rather than native ARM hardware, so nine tests abort and two time out on interfaces qemu does not emulate (raw clone(), PR_SET_MM_ARG_*, SO_ATTACH_FILTER, netlink, netns, SIGBUS), and test-capability crashes the emulator itself. None of it is reachable from the package source. The full suite still runs on amd64 and arm64. * test: fix two test failures on the current build nodes - debian/patches/test-seccomp-accept-ENOSYS-from-sysctl-2-too.patch: _sysctl(2) was removed from the kernel and now fails with ENOSYS rather than EFAULT, so test_protect_sysctl() aborted (upstream commit 0af05e485a3a). - debian/patches/fs-util-do-not-chmod-symlinks-in-touch_file.patch: touch_file() chmod()ed symlinks through /proc/self/fd, which newer kernels reject, so test_touch_file() aborted. Skip the chmod() for symlinks as upstream does in fchmod_and_chown(), and drop the now meaningless mode assertion from the test.
- Products
- libnss-myhostname, libnss-mymachines, libnss-resolve, libnss-systemd, libpam-systemd, libsystemd-dev, libsystemd0, libudev-dev, libudev1, systemd, systemd-container, systemd-coredump, systemd-journal-remote, systemd-sysv, systemd-tests, udev
- Affected versions
- Not specified
- Fixed versions
- 241-7~deb10u10+tuxcare.els3
- CVEs
- CVE-2026-29111
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:21 UTC · Revision 1
Source evidence
* CVE-2026-29111: validate the GetUnitByControlGroup cgroup path - debian/patches/CVE-2026-29111.patch: an unprivileged D-Bus caller could hand PID 1 a cgroup path that is neither absolute nor normalized via the GetUnitByControlGroup method, which on v249 and older overwrites stack memory with attacker-controlled content. Validate with path_is_absolute() and path_is_normalized() before manager_get_unit_by_cgroup(). * test: skip the meson suite on armel - debian/rules: the debian10-els armel worker runs under qemu-user (TCG) rather than native ARM hardware, so nine tests abort and two time out on interfaces qemu does not emulate (raw clone(), PR_SET_MM_ARG_*, SO_ATTACH_FILTER, netlink, netns, SIGBUS), and test-capability crashes the emulator itself. None of it is reachable from the package source. The full suite still runs on amd64 and arm64. * test: fix two test failures on the current build nodes - debian/patches/test-seccomp-accept-ENOSYS-from-sysctl-2-too.patch: _sysctl(2) was removed from the kernel and now fails with ENOSYS rather than EFAULT, so test_protect_sysctl() aborted (upstream commit 0af05e485a3a). - debian/patches/fs-util-do-not-chmod-symlinks-in-touch_file.patch: touch_file() chmod()ed symlinks through /proc/self/fd, which newer kernels reject, so test_touch_file() aborted. Skip the chmod() for symlinks as upstream does in fchmod_and_chown(), and drop the now meaningless mode assertion from the test.
osv:CLSA-2026-1787401254
libnss-myhostname
Fixed versions: 241-7~deb10u10+tuxcare.els3
libnss-mymachines
Fixed versions: 241-7~deb10u10+tuxcare.els3
libnss-resolve
Fixed versions: 241-7~deb10u10+tuxcare.els3
libnss-systemd
Fixed versions: 241-7~deb10u10+tuxcare.els3
libpam-systemd
Fixed versions: 241-7~deb10u10+tuxcare.els3
libsystemd-dev
Fixed versions: 241-7~deb10u10+tuxcare.els3
libsystemd0
Fixed versions: 241-7~deb10u10+tuxcare.els3
libudev-dev
Fixed versions: 241-7~deb10u10+tuxcare.els3
libudev1
Fixed versions: 241-7~deb10u10+tuxcare.els3
systemd
Fixed versions: 241-7~deb10u10+tuxcare.els3
systemd-container
Fixed versions: 241-7~deb10u10+tuxcare.els3
systemd-coredump
Fixed versions: 241-7~deb10u10+tuxcare.els3
systemd-journal-remote
Fixed versions: 241-7~deb10u10+tuxcare.els3
systemd-sysv
Fixed versions: 241-7~deb10u10+tuxcare.els3
systemd-tests
Fixed versions: 241-7~deb10u10+tuxcare.els3
udev
Fixed versions: 241-7~deb10u10+tuxcare.els3
Complete source record
{
"id": "d7b33ae4eb22ac759385f855450aeed6676fcf117c579a342243c71070cbdd30",
"url": "https://osv.dev/vulnerability/CLSA-2026-1787401254",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Fix CVE(s): CVE-2026-29111",
"summary": "* CVE-2026-29111: validate the GetUnitByControlGroup cgroup path - debian/patches/CVE-2026-29111.patch: an unprivileged D-Bus caller could hand PID 1 a cgroup path that is neither absolute nor normalized via the GetUnitByControlGroup method, which on v249 and older overwrites stack memory with attacker-controlled content. Validate with path_is_absolute() and path_is_normalized() before manager_get_unit_by_cgroup(). * test: skip the meson suite on armel - debian/rules: the debian10-els armel worker runs under qemu-user (TCG) rather than native ARM hardware, so nine tests abort and two time out on interfaces qemu does not emulate (raw clone(), PR_SET_MM_ARG_*, SO_ATTACH_FILTER, netlink, netns, SIGBUS), and test-capability crashes the emulator itself. None of it is reachable from the package source. The full suite still runs on amd64 and arm64. * test: fix two test failures on the current build nodes - debian/patches/test-seccomp-accept-ENOSYS-from-sysctl-2-too.patch: _sysctl(2) was removed from the kernel and now fails with ENOSYS rather than EFAULT, so test_protect_sysctl() aborted (upstream commit 0af05e485a3a). - debian/patches/fs-util-do-not-chmod-symlinks-in-touch_file.patch: touch_file() chmod()ed symlinks through /proc/self/fd, which newer kernels reject, so test_touch_file() aborted. Skip the chmod() for symlinks as upstream does in fchmod_and_chown(), and drop the now meaningless mode assertion from the test.",
"evidence": "osv:CLSA-2026-1787401254",
"products": [
{
"name": {
"value": "libnss-myhostname",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libnss-mymachines",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libnss-resolve",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libnss-systemd",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libpam-systemd",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libsystemd-dev",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libsystemd0",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libudev-dev",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libudev1",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "systemd",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "systemd-container",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "systemd-coredump",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "systemd-journal-remote",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "systemd-sysv",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "systemd-tests",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "udev",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "241-7~deb10u10+tuxcare.els3",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1787401254",
"aliases": [
"CLSA-2026-1787401254"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libnss-myhostname",
"purl": "pkg:deb/tuxcare/libnss-myhostname?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libnss-mymachines",
"purl": "pkg:deb/tuxcare/libnss-mymachines?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libnss-resolve",
"purl": "pkg:deb/tuxcare/libnss-resolve?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libnss-systemd",
"purl": "pkg:deb/tuxcare/libnss-systemd?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libpam-systemd",
"purl": "pkg:deb/tuxcare/libpam-systemd?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libsystemd-dev",
"purl": "pkg:deb/tuxcare/libsystemd-dev?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libsystemd0",
"purl": "pkg:deb/tuxcare/libsystemd0?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libudev-dev",
"purl": "pkg:deb/tuxcare/libudev-dev?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "libudev1",
"purl": "pkg:deb/tuxcare/libudev1?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "systemd",
"purl": "pkg:deb/tuxcare/systemd?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "systemd-container",
"purl": "pkg:deb/tuxcare/systemd-container?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "systemd-coredump",
"purl": "pkg:deb/tuxcare/systemd-coredump?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "systemd-journal-remote",
"purl": "pkg:deb/tuxcare/systemd-journal-remote?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "systemd-sysv",
"purl": "pkg:deb/tuxcare/systemd-sysv?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "systemd-tests",
"purl": "pkg:deb/tuxcare/systemd-tests?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "241-7~deb10u10+tuxcare.els3"
}
]
}
],
"package": {
"name": "udev",
"purl": "pkg:deb/tuxcare/udev?distro=debian-10",
"ecosystem": "TuxCare:Debian:10"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"
}
}
],
"modified": "2026-10-26T09:31:52.674935832Z",
"provider": "osv",
"upstream": [
"CVE-2026-29111"
],
"references": [
"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1787401254.html",
"https://nvd.nist.gov/vuln/detail/CVE-2026-29111"
]
},
"related_cves": [
{
"value": "CVE-2026-29111",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 448796,
"published_at": "2026-08-24T08:04:07+00:00"
}