{"id":"CLSA-2026-1787401254","summary":"Fix CVE(s): CVE-2026-29111","details":"   * CVE-2026-29111: validate the GetUnitByControlGroup cgroup path\n     - debian/patches/CVE-2026-29111.patch: an unprivileged D-Bus caller\n       could hand PID 1 a cgroup path that is neither absolute nor\n       normalized via the GetUnitByControlGroup method, which on v249 and\n       older overwrites stack memory with attacker-controlled content.\n       Validate with path_is_absolute() and path_is_normalized() before\n       manager_get_unit_by_cgroup().\n   * test: skip the meson suite on armel\n     - debian/rules: the debian10-els armel worker runs under qemu-user\n       (TCG) rather than native ARM hardware, so nine tests abort and two\n       time out on interfaces qemu does not emulate (raw clone(),\n       PR_SET_MM_ARG_*, SO_ATTACH_FILTER, netlink, netns, SIGBUS), and\n       test-capability crashes the emulator itself.  None of it is\n       reachable from the package source.  The full suite still runs on\n       amd64 and arm64.\n   * test: fix two test failures on the current build nodes\n     - debian/patches/test-seccomp-accept-ENOSYS-from-sysctl-2-too.patch:\n       _sysctl(2) was removed from the kernel and now fails with ENOSYS\n       rather than EFAULT, so test_protect_sysctl() aborted (upstream\n       commit 0af05e485a3a).\n     - debian/patches/fs-util-do-not-chmod-symlinks-in-touch_file.patch:\n       touch_file() chmod()ed symlinks through /proc/self/fd, which newer\n       kernels reject, so test_touch_file() aborted. Skip the chmod() for\n       symlinks as upstream does in fchmod_and_chown(), and drop the now\n       meaningless mode assertion from the test.","modified":"2026-10-26T09:31:52.674935832Z","published":"2026-08-24T08:04:07Z","upstream":["CVE-2026-29111"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1787401254.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29111"}],"affected":[{"package":{"name":"libnss-myhostname","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libnss-myhostname?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libnss-mymachines","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libnss-mymachines?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libnss-resolve","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libnss-resolve?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libnss-systemd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libnss-systemd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libpam-systemd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libpam-systemd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libsystemd-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsystemd-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libsystemd0","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libsystemd0?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libudev-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libudev-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"libudev1","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libudev1?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"systemd","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/systemd?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"systemd-container","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/systemd-container?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"systemd-coredump","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/systemd-coredump?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"systemd-journal-remote","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/systemd-journal-remote?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"systemd-sysv","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/systemd-sysv?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"systemd-tests","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/systemd-tests?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}},{"package":{"name":"udev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/udev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u10+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1787401254.json"}}],"schema_version":"1.9.0"}