It includes the following fixes:
9b75a3d050 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
For a complete list of changes, visit:
bf3fef9988...5a506d73bd
Additionally, it also includes the following backports:
- 20ca3155c5 localed: reload PID1 configuration after modifying /etc/locale.conf
- 3538c202fd test: update TEST-73-LOCALE to define several locale settings in initial PID1 environment
- Drop 5000-coredump-adjust-whitespace.patch
5001-coredump-do-not-allow-user-to-access-coredumps-with-.patch
They are part of v252.4.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1338
- Import commit bf3fef99886bd977a1c7a51d20087bc8977fff44
6372fb0cc4 btrfs-util: convert O_PATH if necessary, in btrfs quota call (bsc#1205560)
12e68eb0e5 blockdev-util: move O_PATH fd conversion into btrfs_get_block_device_fd() to shorten things
bb2bafdc9d btrfs-util: convert to fd_reopen_condition()
1323232948 fd-util: add new helper fd_reopen_conditional()
- Drop 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch
It's no more needed as a fix for bsc#1205560 has been queued, see above.
- Import commit 82898a14f5b0a965ba9c1efc1913fcdf29d446a8 (merge of v252.3)
It includes the following fixes:
9410eb20eb cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
For a complete list of changes, visit:
e7e931b07e...82898a14f5
Additionally, it also includes the following backports:
- 17b2f9f196 utmp-wtmp: fix error in case isatty() fails
- 8d5c487c87 sd-bus: handle -EINTR return from bus_poll() (bsc#1201982)
- 2dd217c8b5 tree-wide: modernizations with RET_NERRNO()
OBS-URL: https://build.opensuse.org/request/show/1041834
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=374
- Import commit bf3fef99886bd977a1c7a51d20087bc8977fff44
6372fb0cc4 btrfs-util: convert O_PATH if necessary, in btrfs quota call (bsc#1205560)
12e68eb0e5 blockdev-util: move O_PATH fd conversion into btrfs_get_block_device_fd() to shorten things
bb2bafdc9d btrfs-util: convert to fd_reopen_condition()
1323232948 fd-util: add new helper fd_reopen_conditional()
- Drop 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch
It's no more needed as a fix for bsc#1205560 has been queued, see above.
- Import commit 82898a14f5b0a965ba9c1efc1913fcdf29d446a8 (merge of v252.3)
It includes the following fixes:
9410eb20eb cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
For a complete list of changes, visit:
e7e931b07e...82898a14f5
Additionally, it also includes the following backports:
- 17b2f9f196 utmp-wtmp: fix error in case isatty() fails
- 8d5c487c87 sd-bus: handle -EINTR return from bus_poll() (bsc#1201982)
- 2dd217c8b5 tree-wide: modernizations with RET_NERRNO()
OBS-URL: https://build.opensuse.org/request/show/1041834
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=374
6372fb0cc4 btrfs-util: convert O_PATH if necessary, in btrfs quota call (bsc#1205560)
12e68eb0e5 blockdev-util: move O_PATH fd conversion into btrfs_get_block_device_fd() to shorten things
bb2bafdc9d btrfs-util: convert to fd_reopen_condition()
1323232948 fd-util: add new helper fd_reopen_conditional()
- Drop 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch
It's no more needed as a fix for bsc#1205560 has been queued, see above.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1334
- Import commit 3bd3e4e6c1efe0d6df776107efde47e15e58fe96
d28e81d65c test: fix the default timeout values described in README.testsuite
d921c83f53 meson: install test-kernel-install only when -Dkernel-install=true
c3b6c4b584 tests: update install_suse_systemd()
3c77335b19 tests: install dmi-sysfs module on openSUSE
df632130cd tests: install systemd-resolved on openSUSE
- Add 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch until
upstream issue #25468 is fixed.
- Drop 6000-meson-install-test-kernel-install-only-when-Dkernel-.patch, the
patch has been merged in the SUSE git repo.
This includes the following bug fixes:
- upstream commit 67c3e1f63a5221b47a8fea85ae421671f29f3b7e (bsc#1200723)
OBS-URL: https://build.opensuse.org/request/show/1037909
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=371
- Import commit 3bd3e4e6c1efe0d6df776107efde47e15e58fe96
d28e81d65c test: fix the default timeout values described in README.testsuite
d921c83f53 meson: install test-kernel-install only when -Dkernel-install=true
c3b6c4b584 tests: update install_suse_systemd()
3c77335b19 tests: install dmi-sysfs module on openSUSE
df632130cd tests: install systemd-resolved on openSUSE
- Add 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch until
upstream issue #25468 is fixed.
- Drop 6000-meson-install-test-kernel-install-only-when-Dkernel-.patch, the
patch has been merged in the SUSE git repo.
This includes the following bug fixes:
- upstream commit 67c3e1f63a5221b47a8fea85ae421671f29f3b7e (bsc#1200723)
OBS-URL: https://build.opensuse.org/request/show/1037909
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=371
d28e81d65c test: fix the default timeout values described in README.testsuite
d921c83f53 meson: install test-kernel-install only when -Dkernel-install=true
c3b6c4b584 tests: update install_suse_systemd()
3c77335b19 tests: install dmi-sysfs module on openSUSE
df632130cd tests: install systemd-resolved on openSUSE
- Add 6000-Revert-tmpfiles-whenever-creating-an-inode-immediate.patch until
upstream issue #25468 is fixed.
- Drop 0001-meson-build-kernel-install-man-page-when-necessary.patch, the patch
has been merged in the SUSE git repo.
This includes the following bug fixes:
- upstream commit 67c3e1f63a5221b47a8fea85ae421671f29f3b7e (bsc#1200723)
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1329
- Import commit f78bba8d037cc26c09bbdd167625b2d7fe1f5a30 (merge of v251.6)
Beside the merge of v251.6, it also includes the following backport:
- 07aaa898bd pstore: do not try to load all known pstore modules
For a complete list of changes, visit:
07aa29e394...f78bba8d03
- Don't create /var/lib/systemd/random-seed in %post (bsc#1181458)
To make sure that the same seed is not replicated when installing from a
'golden' image.
For regular installations the random seed file is initialized by the installer
itself (bsc#1174964). Even if it didn't, the random seed file would be created
on first boot anyway.
- Avoid expanding of macro in comment which leads to an error on installation
(workaround for bsc#1203847)
OBS-URL: https://build.opensuse.org/request/show/1030349
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=366
- Import commit f78bba8d037cc26c09bbdd167625b2d7fe1f5a30 (merge of v251.6)
Beside the merge of v251.6, it also includes the following backport:
- 07aaa898bd pstore: do not try to load all known pstore modules
For a complete list of changes, visit:
07aa29e394...f78bba8d03
- Don't create /var/lib/systemd/random-seed in %post (bsc#1181458)
To make sure that the same seed is not replicated when installing from a
'golden' image.
For regular installations the random seed file is initialized by the installer
itself (bsc#1174964). Even if it didn't, the random seed file would be created
on first boot anyway.
- Avoid expanding of macro in comment which leads to an error on installation
(workaround for bsc#1203847)
OBS-URL: https://build.opensuse.org/request/show/1030349
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=366
To make sure that the same seed is not replicated when installing from a
'golden' image.
For regular installations the random seed file is initialized by the installer
itself (bsc#1174964). Even if it didn't, the random seed file would be created
on first boot anyway.
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1318
- Drop the old band aid used during the breakage introduced by the switch of
/tmp to tmpfs
This was done to address the regression reported in boo#1175779 but shouldn't
be necessary anymore since the (few) affected users should have updated
systemd during the last 2 years.
- Move nss-systemd and nss-myhostname NSS modules into the main package
- Give the instructions to create a home directory with systemd-homed in the
description of the systemd-experimental sub-package
OBS-URL: https://build.opensuse.org/request/show/1005162
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=364
- Drop the old band aid used during the breakage introduced by the switch of
/tmp to tmpfs
This was done to address the regression reported in boo#1175779 but shouldn't
be necessary anymore since the (few) affected users should have updated
systemd during the last 2 years.
- Move nss-systemd and nss-myhostname NSS modules into the main package
- Give the instructions to create a home directory with systemd-homed in the
description of the systemd-experimental sub-package
OBS-URL: https://build.opensuse.org/request/show/1005162
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=364
