Ubuntu USN · USN-8402-1

systemd vulnerabilities

Published: Mon, 08 Jun 2026 13:17

CVE-2026-40226CVE-2023-7008

Summary

Several security issues were fixed in systemd.

Details

It was discovered that systemd-nspawn incorrectly handled certain optional configuration files. A local attacker could possibly use this issue to escape to the host system and execute arbitrary code. (CVE-2026-40226) It was discovered that systemd-resolved incorrectly validated DNSSEC records for signed domains. An attacker could possibly use this issue to manipulate DNS records. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-7008)

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu jammy

systemd→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-myhostname→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-myhostname
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-mymachines→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-mymachines
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-resolve→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-resolve
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-systemd→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-systemd→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd-dev→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd0→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libudev-dev→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libudev-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libudev1→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libudev1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-container→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-container
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-coredump→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-coredump
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-journal-remote→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-journal-remote
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-oomd→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-oomd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-repart→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-repart
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-sysusers→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-sysusers
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-tmpfiles→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-tmpfiles
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-sysv→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-sysv
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-tests→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-tests
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-timesyncd→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-timesyncd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
udev→249.11-0ubuntu3.21apt_upgrade
Standard apt upgrade. Install 249.11-0ubuntu3.21 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y udev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu noble

systemd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-myhostname→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-myhostname
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-mymachines→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-mymachines
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-resolve→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-resolve
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-systemd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-systemd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd-dev→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd-shared→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd-shared
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd0→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libudev-dev→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libudev-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libudev1→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libudev1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-boot→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-boot
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-boot-efi→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-boot-efi
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-container→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-container
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-coredump→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-coredump
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-dev→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-homed→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-homed
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-journal-remote→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-journal-remote
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-oomd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-oomd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-resolved→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-resolved
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-sysusers→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-sysusers
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-tmpfiles→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-tmpfiles
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-sysv→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-sysv
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-tests→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-tests
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-timesyncd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-timesyncd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-ukify→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-ukify
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-userdbd→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-userdbd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
udev→255.4-1ubuntu8.16apt_upgrade
Standard apt upgrade. Install 255.4-1ubuntu8.16 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y udev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Ubuntu questing

systemd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-myhostname→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-myhostname
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-mymachines→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-mymachines
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-resolve→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-resolve
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libnss-systemd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libnss-systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libpam-systemd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libpam-systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd-dev→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd-shared→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd-shared
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libsystemd0→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libsystemd0
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libudev-dev→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libudev-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
libudev1→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y libudev1
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-boot→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-boot
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-boot-efi→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-boot-efi
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-boot-tools→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-boot-tools
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-container→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-container
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-coredump→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-coredump
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-cryptsetup→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-cryptsetup
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-dev→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-dev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-homed→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-homed
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-journal-remote→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-journal-remote
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-oomd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-oomd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-repart→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-repart
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-resolved→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-resolved
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-shutdown→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-shutdown
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-sysusers→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-sysusers
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-standalone-tmpfiles→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-standalone-tmpfiles
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-sysv→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-sysv
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-tests→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-tests
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-timesyncd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-timesyncd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-ukify→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-ukify
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
systemd-userdbd→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y systemd-userdbd
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
udev→257.9-0ubuntu2.5apt_upgrade
Standard apt upgrade. Install 257.9-0ubuntu2.5 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y udev
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8402-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8402-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.

Buy lifetime →See StackPatch →Live audit log →