Systemd released two stable point updates, v261.4 and v260.6, both containing memory-safety and seccomp hardening patches, but no new CVEs were announced. The updates were released just hours apart, with v261.4 incorporating 207 commits and v260.6 containing 179 commits, focusing on fixing various bugs including buffer overflows and tightening security measures on system calls. Notably, v260.6 remains vulnerable to CVE-2026-40227, while v261.4 has already addressed this issue, emphasizing the need for users on the older version to consider upgrading. Both releases are available on systemd's GitHub page for further details and changelogs

Systemd Ships v261.4 and v260.6 With Memory-Safety Patches

Systemd published two stable point releases Saturday, v261.4 at 13:12 UTC and v260.6 at 15:18 UTC, landing within hours of each other. Both are automated, immutable builds that fold in memory-safety and seccomp hardening, though neither announces a brand-new CVE.

Systemd Ships v261.4 and v260.6 With Memory-Safety Patches @ Linux Compatible