From d13708e716a1dd94997f2eed299d8b73b1c4eda9b828137384a28ce04c1750ce Mon Sep 17 00:00:00 2001 From: Franck Bui Date: Thu, 10 Jan 2019 16:21:21 +0000 Subject: [PATCH 1/2] Accepting request 664420 from home:fbui:systemd:openSUSE-Factory MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Import commit 3bece8a25ae11e8ec132cdecc7e72a00ee790994 89a9721a47 Revert "logind: become the controlling terminal process before restoring VT" (bsc#1120836) c3a8dc821b pam_systemd: reword message about not creating a session 0ba0f5b3ef pam_systemd: suppress LOG_DEBUG log messages if debugging is off - Import commit a3b059a8c60622e4ec30aabda93c6b41d0953dc4 9dbe9f12ec journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323) 61d569ab1b journal-remote: verify entry length from header a08760b26c µhttpd: use a cleanup function to call MHD_destroy_response 43f46a1a3d journal-gateway: use _cleanup_ attribute to stop microhttpd daemon 437b0b2d01 journald: lower the maximum entry size limit to ½ for non-sealed fds ac9e209710 journald: when processing a native message, bail more quickly on overbig messages ce103705b9 journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323) 35538171c2 coredump: fix message when we fail to save a journald coredump cfe247b555 basic/process-util: limit command line lengths to _SC_ARG_MAX 9d59e6f6ee journald: do not store the iovec entry for process commandline on stack (CVE-2018-16864 bsc#1120323) 8d650a68d4 journald: remove unnecessary {} b608f532a4 coredump: remove duplicate MESSAGE= prefix from message 0dbb2dc066 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933) e501d65540 Revert "systemctl: when removing enablement or mask symlinks, cover both /run and /etc" d3ea69961f fs-util: rename safe_transition() into unsafe_transition() 338470fdc9 tmpfiles: use CHASE_WARN in addition to CHASE_SAFE d9ae1b30da fs-util: make chase_symlink() returns -ENOLINK when unsafe transitions are met 8b76594d1f fs-util: add new CHASE_WARN flag to chase_symlinks() OBS-URL: https://build.opensuse.org/request/show/664420 OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1049 --- systemd-mini.changes | 33 +++++++++++++++++++++++++ systemd-mini.spec | 4 +-- systemd-v239+suse.138.g8ae56af78.tar.xz | 3 --- systemd-v239+suse.161.g3bece8a25.tar.xz | 3 +++ systemd.changes | 33 +++++++++++++++++++++++++ systemd.spec | 4 +-- 6 files changed, 73 insertions(+), 7 deletions(-) delete mode 100644 systemd-v239+suse.138.g8ae56af78.tar.xz create mode 100644 systemd-v239+suse.161.g3bece8a25.tar.xz diff --git a/systemd-mini.changes b/systemd-mini.changes index 8fc9bdc7..80854d4f 100644 --- a/systemd-mini.changes +++ b/systemd-mini.changes @@ -1,3 +1,36 @@ +------------------------------------------------------------------- +Thu Jan 10 15:54:22 UTC 2019 - Franck Bui + +- Import commit 3bece8a25ae11e8ec132cdecc7e72a00ee790994 + + 89a9721a47 Revert "logind: become the controlling terminal process before restoring VT" (bsc#1120836) + c3a8dc821b pam_systemd: reword message about not creating a session + 0ba0f5b3ef pam_systemd: suppress LOG_DEBUG log messages if debugging is off + +------------------------------------------------------------------- +Thu Jan 10 07:17:22 UTC 2019 - Franck Bui + +- Import commit a3b059a8c60622e4ec30aabda93c6b41d0953dc4 + + 9dbe9f12ec journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323) + 61d569ab1b journal-remote: verify entry length from header + a08760b26c µhttpd: use a cleanup function to call MHD_destroy_response + 43f46a1a3d journal-gateway: use _cleanup_ attribute to stop microhttpd daemon + 437b0b2d01 journald: lower the maximum entry size limit to ½ for non-sealed fds + ac9e209710 journald: when processing a native message, bail more quickly on overbig messages + ce103705b9 journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323) + 35538171c2 coredump: fix message when we fail to save a journald coredump + cfe247b555 basic/process-util: limit command line lengths to _SC_ARG_MAX + 9d59e6f6ee journald: do not store the iovec entry for process commandline on stack (CVE-2018-16864 bsc#1120323) + 8d650a68d4 journald: remove unnecessary {} + b608f532a4 coredump: remove duplicate MESSAGE= prefix from message + 0dbb2dc066 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933) + e501d65540 Revert "systemctl: when removing enablement or mask symlinks, cover both /run and /etc" + d3ea69961f fs-util: rename safe_transition() into unsafe_transition() + 338470fdc9 tmpfiles: use CHASE_WARN in addition to CHASE_SAFE + d9ae1b30da fs-util: make chase_symlink() returns -ENOLINK when unsafe transitions are met + 8b76594d1f fs-util: add new CHASE_WARN flag to chase_symlinks() + ------------------------------------------------------------------- Tue Dec 4 13:20:48 UTC 2018 - Franck Bui diff --git a/systemd-mini.spec b/systemd-mini.spec index 5aa639d0..bdcc9a6c 100644 --- a/systemd-mini.spec +++ b/systemd-mini.spec @@ -1,7 +1,7 @@ # # spec file for package systemd-mini # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,7 +26,7 @@ ##### WARNING: please do not edit this auto generated spec file. Use the systemd.spec! ##### %define mini -mini %define min_kernel_version 4.5 -%define suse_version +suse.138.g8ae56af78 +%define suse_version +suse.161.g3bece8a25 %bcond_with gnuefi %if 0%{?bootstrap} diff --git a/systemd-v239+suse.138.g8ae56af78.tar.xz b/systemd-v239+suse.138.g8ae56af78.tar.xz deleted file mode 100644 index 2654b425..00000000 --- a/systemd-v239+suse.138.g8ae56af78.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:cd8bc41cc212cf637e93a98f0499b7ad4792ce401c1364eca15d1102944fea86 -size 4857940 diff --git a/systemd-v239+suse.161.g3bece8a25.tar.xz b/systemd-v239+suse.161.g3bece8a25.tar.xz new file mode 100644 index 00000000..0beaea0c --- /dev/null +++ b/systemd-v239+suse.161.g3bece8a25.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f2714f40405f1d1dc91e48659a89612c6818cbff995ed49ab5087c470ee6d33b +size 4858724 diff --git a/systemd.changes b/systemd.changes index 8fc9bdc7..80854d4f 100644 --- a/systemd.changes +++ b/systemd.changes @@ -1,3 +1,36 @@ +------------------------------------------------------------------- +Thu Jan 10 15:54:22 UTC 2019 - Franck Bui + +- Import commit 3bece8a25ae11e8ec132cdecc7e72a00ee790994 + + 89a9721a47 Revert "logind: become the controlling terminal process before restoring VT" (bsc#1120836) + c3a8dc821b pam_systemd: reword message about not creating a session + 0ba0f5b3ef pam_systemd: suppress LOG_DEBUG log messages if debugging is off + +------------------------------------------------------------------- +Thu Jan 10 07:17:22 UTC 2019 - Franck Bui + +- Import commit a3b059a8c60622e4ec30aabda93c6b41d0953dc4 + + 9dbe9f12ec journal-remote: set a limit on the number of fields in a message (CVE-2018-16865 bsc#1120323) + 61d569ab1b journal-remote: verify entry length from header + a08760b26c µhttpd: use a cleanup function to call MHD_destroy_response + 43f46a1a3d journal-gateway: use _cleanup_ attribute to stop microhttpd daemon + 437b0b2d01 journald: lower the maximum entry size limit to ½ for non-sealed fds + ac9e209710 journald: when processing a native message, bail more quickly on overbig messages + ce103705b9 journald: set a limit on the number of fields (1k) (CVE-2018-16865 bsc#1120323) + 35538171c2 coredump: fix message when we fail to save a journald coredump + cfe247b555 basic/process-util: limit command line lengths to _SC_ARG_MAX + 9d59e6f6ee journald: do not store the iovec entry for process commandline on stack (CVE-2018-16864 bsc#1120323) + 8d650a68d4 journald: remove unnecessary {} + b608f532a4 coredump: remove duplicate MESSAGE= prefix from message + 0dbb2dc066 vconsole-setup: fonts copy will fail if the current terminal is in graphical mode (bsc#1114933) + e501d65540 Revert "systemctl: when removing enablement or mask symlinks, cover both /run and /etc" + d3ea69961f fs-util: rename safe_transition() into unsafe_transition() + 338470fdc9 tmpfiles: use CHASE_WARN in addition to CHASE_SAFE + d9ae1b30da fs-util: make chase_symlink() returns -ENOLINK when unsafe transitions are met + 8b76594d1f fs-util: add new CHASE_WARN flag to chase_symlinks() + ------------------------------------------------------------------- Tue Dec 4 13:20:48 UTC 2018 - Franck Bui diff --git a/systemd.spec b/systemd.spec index cf294aaa..980c6dbc 100644 --- a/systemd.spec +++ b/systemd.spec @@ -1,7 +1,7 @@ # # spec file for package systemd # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -24,7 +24,7 @@ %define bootstrap 0 %define mini %nil %define min_kernel_version 4.5 -%define suse_version +suse.138.g8ae56af78 +%define suse_version +suse.161.g3bece8a25 %bcond_with gnuefi %if 0%{?bootstrap} From 6f50f5837cc240ede0ddb0b44ca7869be66bb30e7f5880377ec08a8764db69d1 Mon Sep 17 00:00:00 2001 From: Franck Bui Date: Tue, 15 Jan 2019 10:11:50 +0000 Subject: [PATCH 2/2] Accepting request 666162 from home:fbui:systemd:openSUSE-Factory - Import commit ad34cc45f63720ced69960dc66b47bddb146176d Import a bunch of fixes from stable/v239-stable: c8293f5af4 Revert "network: set DynamicUser= to systemd-networkd.service" 7f605592e6 Revert "resolve: enable DynamicUser= for systemd-resolved.service" 5a48e92e06 test: Fix networkd test for an already running service 36eae1688b Revert "timesyncd: enable DynamicUser=" 3a11f24cf0 Revert "unit: drop After=systemd-sysusers.service from timesyncd" 23cfd15ce9 machinectl: fix verbosity of import-raw or friends ba037daf29 Make bzip2 an optional dependency for systemd-importd fb609d2721 pull: initialize libgcrypt before calling any functions provided by libgcrypt c50857bc6b hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571) 9a12fd17f5 man: Mention that paths in unit files must be fully normalized. 76fc2ab4a6 tree-wide: use instead of #ifdef for HAVE_* fcc699c093 network: update log message a4f497b2cd Use #if instead of #ifdef for ENABLE_GSHADOW 121c662eb8 man: add missing option for system.conf 564341146e core: add missing option and drop nonexistent option in system.conf 7082a3599f journal: add missing option in journald.conf 3c15efa9c1 basic: add missing comma in raw_clone assembly for sparc 4c210b6dce cryptsetup: Add dependency on loopback setup to generated units c777fbbe3e journal-gateway: use localStorage["cursor"] only when it has valid value c5b1bef639 journal-gateway: explicitly declare local variables 2361522ca6 analyze: actually select longest activated-time of services 3e810d92d9 sd-bus: fix implicit downcast of bitfield reported by LGTM aef660a4cf resolvconf: fixes for the compatibility interface 06b3f54f50 install: fix error handling in is_symlink_with_known_name() f70ab9a468 portable: fix error handling d2c40d4e80 resolve: fix return value type of dns_answer_has_dname_for_cname() 6f684e0670 resolve: dns_scope_network_good() does not returns negative errno 15d83e1138 bus-util: fix error handling OBS-URL: https://build.opensuse.org/request/show/666162 OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1050 --- systemd-mini.changes | 37 +++++++++++++++++++++++++ systemd-mini.spec | 2 +- systemd-v239+suse.161.g3bece8a25.tar.xz | 3 -- systemd-v239+suse.191.gad34cc45f.tar.xz | 3 ++ systemd.changes | 37 +++++++++++++++++++++++++ systemd.spec | 2 +- 6 files changed, 79 insertions(+), 5 deletions(-) delete mode 100644 systemd-v239+suse.161.g3bece8a25.tar.xz create mode 100644 systemd-v239+suse.191.gad34cc45f.tar.xz diff --git a/systemd-mini.changes b/systemd-mini.changes index 80854d4f..b9f0720a 100644 --- a/systemd-mini.changes +++ b/systemd-mini.changes @@ -1,3 +1,40 @@ +------------------------------------------------------------------- +Tue Jan 15 09:04:47 UTC 2019 - Franck Bui + +- Import commit ad34cc45f63720ced69960dc66b47bddb146176d + + Import a bunch of fixes from stable/v239-stable: + + c8293f5af4 Revert "network: set DynamicUser= to systemd-networkd.service" + 7f605592e6 Revert "resolve: enable DynamicUser= for systemd-resolved.service" + 5a48e92e06 test: Fix networkd test for an already running service + 36eae1688b Revert "timesyncd: enable DynamicUser=" + 3a11f24cf0 Revert "unit: drop After=systemd-sysusers.service from timesyncd" + 23cfd15ce9 machinectl: fix verbosity of import-raw or friends + ba037daf29 Make bzip2 an optional dependency for systemd-importd + fb609d2721 pull: initialize libgcrypt before calling any functions provided by libgcrypt + c50857bc6b hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571) + 9a12fd17f5 man: Mention that paths in unit files must be fully normalized. + 76fc2ab4a6 tree-wide: use instead of #ifdef for HAVE_* + fcc699c093 network: update log message + a4f497b2cd Use #if instead of #ifdef for ENABLE_GSHADOW + 121c662eb8 man: add missing option for system.conf + 564341146e core: add missing option and drop nonexistent option in system.conf + 7082a3599f journal: add missing option in journald.conf + 3c15efa9c1 basic: add missing comma in raw_clone assembly for sparc + 4c210b6dce cryptsetup: Add dependency on loopback setup to generated units + c777fbbe3e journal-gateway: use localStorage["cursor"] only when it has valid value + c5b1bef639 journal-gateway: explicitly declare local variables + 2361522ca6 analyze: actually select longest activated-time of services + 3e810d92d9 sd-bus: fix implicit downcast of bitfield reported by LGTM + aef660a4cf resolvconf: fixes for the compatibility interface + 06b3f54f50 install: fix error handling in is_symlink_with_known_name() + f70ab9a468 portable: fix error handling + d2c40d4e80 resolve: fix return value type of dns_answer_has_dname_for_cname() + 6f684e0670 resolve: dns_scope_network_good() does not returns negative errno + 15d83e1138 bus-util: fix error handling + ba0a1f3384 core: free lines after reading them + ------------------------------------------------------------------- Thu Jan 10 15:54:22 UTC 2019 - Franck Bui diff --git a/systemd-mini.spec b/systemd-mini.spec index bdcc9a6c..b9c0d70b 100644 --- a/systemd-mini.spec +++ b/systemd-mini.spec @@ -26,7 +26,7 @@ ##### WARNING: please do not edit this auto generated spec file. Use the systemd.spec! ##### %define mini -mini %define min_kernel_version 4.5 -%define suse_version +suse.161.g3bece8a25 +%define suse_version +suse.191.gad34cc45f %bcond_with gnuefi %if 0%{?bootstrap} diff --git a/systemd-v239+suse.161.g3bece8a25.tar.xz b/systemd-v239+suse.161.g3bece8a25.tar.xz deleted file mode 100644 index 0beaea0c..00000000 --- a/systemd-v239+suse.161.g3bece8a25.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f2714f40405f1d1dc91e48659a89612c6818cbff995ed49ab5087c470ee6d33b -size 4858724 diff --git a/systemd-v239+suse.191.gad34cc45f.tar.xz b/systemd-v239+suse.191.gad34cc45f.tar.xz new file mode 100644 index 00000000..4b76a164 --- /dev/null +++ b/systemd-v239+suse.191.gad34cc45f.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:41ecaea73db343549ca13c297a93304cb211fe405d2c1e953ab047b819aa0b92 +size 4859076 diff --git a/systemd.changes b/systemd.changes index 80854d4f..b9f0720a 100644 --- a/systemd.changes +++ b/systemd.changes @@ -1,3 +1,40 @@ +------------------------------------------------------------------- +Tue Jan 15 09:04:47 UTC 2019 - Franck Bui + +- Import commit ad34cc45f63720ced69960dc66b47bddb146176d + + Import a bunch of fixes from stable/v239-stable: + + c8293f5af4 Revert "network: set DynamicUser= to systemd-networkd.service" + 7f605592e6 Revert "resolve: enable DynamicUser= for systemd-resolved.service" + 5a48e92e06 test: Fix networkd test for an already running service + 36eae1688b Revert "timesyncd: enable DynamicUser=" + 3a11f24cf0 Revert "unit: drop After=systemd-sysusers.service from timesyncd" + 23cfd15ce9 machinectl: fix verbosity of import-raw or friends + ba037daf29 Make bzip2 an optional dependency for systemd-importd + fb609d2721 pull: initialize libgcrypt before calling any functions provided by libgcrypt + c50857bc6b hwdb: remove stray 'i' in hwdb match string for the HP Spectre (#9571) + 9a12fd17f5 man: Mention that paths in unit files must be fully normalized. + 76fc2ab4a6 tree-wide: use instead of #ifdef for HAVE_* + fcc699c093 network: update log message + a4f497b2cd Use #if instead of #ifdef for ENABLE_GSHADOW + 121c662eb8 man: add missing option for system.conf + 564341146e core: add missing option and drop nonexistent option in system.conf + 7082a3599f journal: add missing option in journald.conf + 3c15efa9c1 basic: add missing comma in raw_clone assembly for sparc + 4c210b6dce cryptsetup: Add dependency on loopback setup to generated units + c777fbbe3e journal-gateway: use localStorage["cursor"] only when it has valid value + c5b1bef639 journal-gateway: explicitly declare local variables + 2361522ca6 analyze: actually select longest activated-time of services + 3e810d92d9 sd-bus: fix implicit downcast of bitfield reported by LGTM + aef660a4cf resolvconf: fixes for the compatibility interface + 06b3f54f50 install: fix error handling in is_symlink_with_known_name() + f70ab9a468 portable: fix error handling + d2c40d4e80 resolve: fix return value type of dns_answer_has_dname_for_cname() + 6f684e0670 resolve: dns_scope_network_good() does not returns negative errno + 15d83e1138 bus-util: fix error handling + ba0a1f3384 core: free lines after reading them + ------------------------------------------------------------------- Thu Jan 10 15:54:22 UTC 2019 - Franck Bui diff --git a/systemd.spec b/systemd.spec index 980c6dbc..e0fbaa70 100644 --- a/systemd.spec +++ b/systemd.spec @@ -24,7 +24,7 @@ %define bootstrap 0 %define mini %nil %define min_kernel_version 4.5 -%define suse_version +suse.161.g3bece8a25 +%define suse_version +suse.191.gad34cc45f %bcond_with gnuefi %if 0%{?bootstrap}