[ Arnaud Rebillout ]
* Fix root-unittests.
* CVE-2026-4105: Local privilege escalation in systemd-machined.
* CVE-2026-29111: Local unprivileged user can trigger a stack overwriting.
* CVE-2026-40225: Local root execution can occur via malicious hardware
devices and unsanitized kernel output.
* CVE-2026-40226: systemd-nspawn: escape-to-host action can occur via a
crafted optional config file.