From 2860eff6df60f178dc4d11d26dcb25cbee31eff1 Mon Sep 17 00:00:00 2001 From: Azure Linux Security Servicing Account Date: Fri, 14 Aug 2026 04:11:10 +0000 Subject: [PATCH] Patch systemd-bootstrap for CVE-2026-15059 --- SPECS/systemd-bootstrap/CVE-2026-15059.patch | 37 +++++++++++++++++++ .../systemd-bootstrap/systemd-bootstrap.spec | 6 ++- .../manifests/package/toolchain_aarch64.txt | 10 ++--- .../manifests/package/toolchain_x86_64.txt | 10 ++--- 4 files changed, 52 insertions(+), 11 deletions(-) create mode 100644 SPECS/systemd-bootstrap/CVE-2026-15059.patch diff --git a/SPECS/systemd-bootstrap/CVE-2026-15059.patch b/SPECS/systemd-bootstrap/CVE-2026-15059.patch new file mode 100644 index 00000000000..0f66c714bca --- /dev/null +++ b/SPECS/systemd-bootstrap/CVE-2026-15059.patch @@ -0,0 +1,37 @@ +From e8c1f91e4cc8f9ba0fa9c2e27918e651b8c5efd3 Mon Sep 17 00:00:00 2001 +From: Luca Boccassi +Date: Wed, 3 Jun 2026 16:47:54 +0100 +Subject: [PATCH] oomd: reject invalid arguments early + +Validate input parameter immediately during initial parsing + +Follow-up for 9de5e32136949a531e71cb31170025c2e1d3430e + +(cherry picked from commit cde88c4ea364e816619f385a870d074ebc12fe0f) +(cherry picked from commit 1b2a891e311acced16e0b7b16f220a2a7b08dde4) +(cherry picked from commit 967850cb99e3644a08f195507b8de22dd63abdf5) +Signed-off-by: Azure Linux Security Servicing Account +Upstream-reference: https://github.com/systemd/systemd/commit/a8feb2f23565d39df5c90a753c851c1934a53117.patch +--- + src/oom/oomd-manager.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/src/oom/oomd-manager.c b/src/oom/oomd-manager.c +index 9f4f083..d7d7e74 100644 +--- a/src/oom/oomd-manager.c ++++ b/src/oom/oomd-manager.c +@@ -78,6 +78,11 @@ static int process_managed_oom_message(Manager *m, uid_t uid, JsonVariant *param + if (r < 0) + continue; + ++ if (!path_is_normalized(empty_to_root(message.path))) { ++ log_debug("Received non-normalized cgroup path '%s', ignoring.", message.path); ++ continue; ++ } ++ + if (uid != 0) { + uid_t cg_uid; + +-- +2.45.4 + diff --git a/SPECS/systemd-bootstrap/systemd-bootstrap.spec b/SPECS/systemd-bootstrap/systemd-bootstrap.spec index b03f1231fad..7f278e32863 100644 --- a/SPECS/systemd-bootstrap/systemd-bootstrap.spec +++ b/SPECS/systemd-bootstrap/systemd-bootstrap.spec @@ -1,7 +1,7 @@ Summary: Bootstrap version of systemd. Workaround for systemd circular dependency. Name: systemd-bootstrap Version: 250.3 -Release: 19%{?dist} +Release: 20%{?dist} License: LGPLv2+ AND GPLv2+ AND MIT Vendor: Microsoft Corporation Distribution: Azure Linux @@ -50,6 +50,7 @@ Patch7: update-cifs-for-kernel-headers-6.1.patch Patch8: use-255-macros.patch Patch9: CVE-2023-7008.patch Patch10: CVE-2026-29111.patch +Patch11: CVE-2026-15059.patch BuildRequires: docbook-dtd-xml BuildRequires: docbook-style-xsl BuildRequires: gettext @@ -287,6 +288,9 @@ fi %{_datadir}/pkgconfig/udev.pc %changelog +* Fri Aug 14 2026 Azure Linux Security Servicing Account - 250.3-20 +- Patch for CVE-2026-15059 + * Mon Mar 30 2026 Azure Linux Security Servicing Account - 250.3-19 - Patch for CVE-2026-29111 diff --git a/toolkit/resources/manifests/package/toolchain_aarch64.txt b/toolkit/resources/manifests/package/toolchain_aarch64.txt index 986c03aea6d..c312b22e3f5 100644 --- a/toolkit/resources/manifests/package/toolchain_aarch64.txt +++ b/toolkit/resources/manifests/package/toolchain_aarch64.txt @@ -580,11 +580,11 @@ sqlite-devel-3.44.0-4.azl3.aarch64.rpm sqlite-libs-3.44.0-4.azl3.aarch64.rpm swig-4.2.1-1.azl3.aarch64.rpm swig-debuginfo-4.2.1-1.azl3.aarch64.rpm -systemd-bootstrap-250.3-19.azl3.aarch64.rpm -systemd-bootstrap-debuginfo-250.3-19.azl3.aarch64.rpm -systemd-bootstrap-devel-250.3-19.azl3.aarch64.rpm -systemd-bootstrap-libs-250.3-19.azl3.aarch64.rpm -systemd-bootstrap-rpm-macros-250.3-19.azl3.noarch.rpm +systemd-bootstrap-250.3-20.azl3.aarch64.rpm +systemd-bootstrap-debuginfo-250.3-20.azl3.aarch64.rpm +systemd-bootstrap-devel-250.3-20.azl3.aarch64.rpm +systemd-bootstrap-libs-250.3-20.azl3.aarch64.rpm +systemd-bootstrap-rpm-macros-250.3-20.azl3.noarch.rpm tar-1.35-2.azl3.aarch64.rpm tar-debuginfo-1.35-2.azl3.aarch64.rpm tdnf-3.5.8-8.azl3.aarch64.rpm diff --git a/toolkit/resources/manifests/package/toolchain_x86_64.txt b/toolkit/resources/manifests/package/toolchain_x86_64.txt index a89b8ffceb0..98e6eaf9e7e 100644 --- a/toolkit/resources/manifests/package/toolchain_x86_64.txt +++ b/toolkit/resources/manifests/package/toolchain_x86_64.txt @@ -588,11 +588,11 @@ sqlite-devel-3.44.0-4.azl3.x86_64.rpm sqlite-libs-3.44.0-4.azl3.x86_64.rpm swig-4.2.1-1.azl3.x86_64.rpm swig-debuginfo-4.2.1-1.azl3.x86_64.rpm -systemd-bootstrap-250.3-19.azl3.x86_64.rpm -systemd-bootstrap-debuginfo-250.3-19.azl3.x86_64.rpm -systemd-bootstrap-devel-250.3-19.azl3.x86_64.rpm -systemd-bootstrap-libs-250.3-19.azl3.x86_64.rpm -systemd-bootstrap-rpm-macros-250.3-19.azl3.noarch.rpm +systemd-bootstrap-250.3-20.azl3.x86_64.rpm +systemd-bootstrap-debuginfo-250.3-20.azl3.x86_64.rpm +systemd-bootstrap-devel-250.3-20.azl3.x86_64.rpm +systemd-bootstrap-libs-250.3-20.azl3.x86_64.rpm +systemd-bootstrap-rpm-macros-250.3-20.azl3.noarch.rpm tar-1.35-2.azl3.x86_64.rpm tar-debuginfo-1.35-2.azl3.x86_64.rpm tdnf-3.5.8-8.azl3.x86_64.rpm