SUSE-SU-2026:22537-1: important: Security update for systemd

[SLE-UPDATES]

# Security update for systemd

Announcement ID: SUSE-SU-2026:22537-1  
Release Date: 2026-07-03T08:47:49Z  
Rating: important  
References:

  * bsc#1245551
  * bsc#1248261
  * bsc#1251948
  * bsc#1254924
  * bsc#1259071
  * bsc#1260357
  * bsc#1261982
  * bsc#1261983
  * bsc#1262305
  * bsc#1263117
  * bsc#1267644
  * bsc#1267647
  * jsc#PED-15946
  * jsc#PED-8812

  
Affected Products:

  * SUSE Linux Micro 6.2
  * SUSE Linux Micro Extras 6.2

  
  
An update that contains two features and has 12 fixes can now be installed.

## Description:

This update for systemd fixes the following issues:

Changes in systemd:

  * Better handle TLS allocation failure (bsc#1254924).
  * Disable mounting `debugfs` by default (jsc#PED-8812).
  * Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 (bsc#1267647
    bsc#1267644 bsc#1262305 bsc#1263117).
  * Move `systemd-pcrlock` out from the experimental sub-package to `udev`
    (bsc#1248261 jsc#PED-15946).
  * Add a weak runtime dependency on `libtss2-tcti-device0` (bsc#1260357).
  * Import commit 59336000ef7850eba0963c6a690ff3371c425929 (bsc#1261982
    bsc#1261983).
  * Add a weak runtime dependency on `polkit` (bsc#1259071).
  * systemd-update-helper: fix the clean-state command only removing
    `$STATE_DIR/system` instead of `$STATE_DIR/`.
  * systemd-update-helper: add `--root` option for testing convenience.
  * systemd-update-helper: fix incorrect skipping of `systemctl disable` during
    package removal (bsc#1245551).
  * systemd-update-helper: fix `do_install_units()` incorrectly returning 1 when
    no units need preset.
  * systemd.spec: introduce `%bcond_without` docs to allow skipping man pages
    and `devel-doc`.
  * systemd.spec: drop the `%{release}` number from the SBAT version
    (bsc#1251948).

## Special Instructions and Notes:

  * Please reboot the system after installing this update.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Micro Extras 6.2  
    zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1151=1

## Package List:

  * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64)
    * systemd-debugsource-257.13-160000.2.1
    * systemd-devel-257.13-160000.2.1
    * systemd-debuginfo-257.13-160000.2.1

## References:

  * https://bugzilla.suse.com/show_bug.cgi?id=1245551
  * https://bugzilla.suse.com/show_bug.cgi?id=1248261
  * https://bugzilla.suse.com/show_bug.cgi?id=1251948
  * https://bugzilla.suse.com/show_bug.cgi?id=1254924
  * https://bugzilla.suse.com/show_bug.cgi?id=1259071
  * https://bugzilla.suse.com/show_bug.cgi?id=1260357
  * https://bugzilla.suse.com/show_bug.cgi?id=1261982
  * https://bugzilla.suse.com/show_bug.cgi?id=1261983
  * https://bugzilla.suse.com/show_bug.cgi?id=1262305
  * https://bugzilla.suse.com/show_bug.cgi?id=1263117
  * https://bugzilla.suse.com/show_bug.cgi?id=1267644
  * https://bugzilla.suse.com/show_bug.cgi?id=1267647
  * https://jira.suse.com/browse/PED-15946
  * https://jira.suse.com/browse/PED-8812

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260713/f0ad0081/attachment.htm>