Systemd v258.12 Ships with Buffer-Overflow Fixes as Final Part of Four-Point Release Batch
Systemd maintainers issued four stable point releases, with the others landing yesterday and v258.12 arriving overnight to fold in a cluster of memory-safety corrections. The v258.12 update breaks down into 128 commits touching 188 files, with the bulk of changes landing in core subsystems like automount teardown, job cancellation, and specifier handling, while the memory-safety fixes cover an off-by-one buffer overflow in logind, an off-by-two write in the ndisc packet-builder, sd-bus append overflow protection, journal hash-loop rejection, and a DNS decompression jump limit. The v258 feature baseline behind this release dropped cgroup v1 support in favor of cgroup v2 only, raised the kernel baseline to 5.4, removed the old System V commands, and still carries a large active install base across servers and desktops. systemd runs a "latest version" model with no long-term-support branch, leaving operators to track the rolling point releases, with v262 currently the newest.
Systemd v258.12 Ships with Buffer-Overflow Fixes as Final Part of Four-Point Release Batch
Systemd maintainers have released version 258.12, the final part of a four-point release batch that includes significant memory-safety fixes aimed at addressing buffer overflow vulnerabilities. This update consists of 128 commits affecting 188 files, primarily targeting core subsystems, with notable corrections in areas such as logind and DNS packet decompression. Systemd's approach emphasizes regular stable releases for timely bug fixes, rather than focusing solely on new features, which are highlighted in larger, scheduled releases. Operators should treat version 258.12 as an important patch, as it addresses real-world security issues while the system follows a "latest version" model with no long-term support
