projects / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 77e0b05 4827a11)
systemd (241-7~deb10u4) buster; urgency=medium
authorMichael Biebl <biebl@debian.org>
Mon, 27 Apr 2020 17:02:57 +0000 (18:02 +0100)
committerMichael Biebl <biebl@debian.org>
Mon, 27 Apr 2020 17:02:57 +0000 (18:02 +0100)
commit11d2ca13063921ba9cf5c60e2fa6eb2244b90783
tree512004436da63ad7f811ac0bc0377a76a913a27dtree | snapshot
parent77e0b057c3794fd06dd68dd3fc7cd754d99c1e76commit | diff
parent4827a117417cbd23134c803e40aee52c1a35373ecommit | diff
systemd (241-7~deb10u4) buster; urgency=medium

  * polkit: when authorizing via PolicyKit re-resolve callback/userdata
    instead of caching it.
    This fixes a heap use-after-free vulnerability in systemd, when
    asynchronous PolicyKit queries are performed while handling DBus messages.
    CVE-2020-1712 (Closes: #950732)
  * Install 60-block.rules in udev-udeb and initramfs-tools.
    The block device rules were split out from 60-persistent-storage.rules
    into its own rules file in v220. Those rules ensure that change events
    are emitted and the udev db is updated after metadata changes.
    Thanks to Pascal Hambourg (Closes: #958397)

[dgit import unpatched systemd 241-7~deb10u4]
201 files changed:
debian/README.Debian | | blob
debian/README.source | | blob
debian/changelog | | blob
debian/compat | | blob
debian/control | | blob
debian/copyright | | blob
debian/extra/checkout-upstream | | blob
debian/extra/dhclient-exit-hooks.d/timesyncd | | blob
debian/extra/fbdev-blacklist.conf | | blob
debian/extra/init-functions.d/40-systemd | | blob
debian/extra/initramfs-tools/hooks/udev | | blob
debian/extra/initramfs-tools/scripts/init-bottom/udev | | blob
debian/extra/initramfs-tools/scripts/init-top/udev | | blob
debian/extra/kernel-install.d/85-initrd.install | | blob
debian/extra/make-fbdev-blacklist | | blob
debian/extra/make-sysusers-basic | | blob
debian/extra/pam-configs/systemd | | blob
debian/extra/pam.d/systemd-user | | blob
debian/extra/rules-ubuntu/40-vm-hotadd.rules | | blob
debian/extra/rules-ubuntu/61-persistent-storage-android.rules | | blob
debian/extra/rules-ubuntu/71-power-switch-proliant.rules | | blob
debian/extra/rules-ubuntu/78-graphics-card.rules | | blob
debian/extra/rules/50-firmware.rules | | blob
debian/extra/rules/73-special-net-names.rules | | blob
debian/extra/rules/73-usb-net-by-mac.rules | | blob
debian/extra/rules/80-debian-compat.rules | | blob
debian/extra/set-cpufreq | | blob
debian/extra/start-udev | | blob
debian/extra/systemd-sysv-install | | blob
debian/extra/systemd.py | | blob
debian/extra/tmpfiles.d/debian.conf | | blob
debian/extra/udev.py | | blob
debian/extra/units-ubuntu/ondemand.service | | blob
debian/extra/units-ubuntu/user@.service.d/timeout.conf | | blob
debian/extra/units/getty-static.service | | blob
debian/extra/units/rc-local.service.d/debian.conf | | blob
debian/extra/units/systemd-resolved.service.d/resolvconf.conf | | blob
debian/extra/units/systemd-timesyncd.service.d/disable-with-time-daemon.conf | | blob
debian/gbp.conf | | blob
debian/git-cherry-pick | | blob
debian/libnss-myhostname.install | | blob
debian/libnss-myhostname.lintian-overrides | | blob
debian/libnss-myhostname.postinst | | blob
debian/libnss-myhostname.postrm | | blob
debian/libnss-mymachines.install | | blob
debian/libnss-mymachines.lintian-overrides | | blob
debian/libnss-mymachines.postinst | | blob
debian/libnss-mymachines.postrm | | blob
debian/libnss-resolve.install | | blob
debian/libnss-resolve.lintian-overrides | | blob
debian/libnss-resolve.postinst | | blob
debian/libnss-resolve.postrm | | blob
debian/libnss-systemd.install | | blob
debian/libnss-systemd.lintian-overrides | | blob
debian/libnss-systemd.postinst | | blob
debian/libnss-systemd.postrm | | blob
debian/libpam-systemd.install | | blob
debian/libpam-systemd.postinst | | blob
debian/libpam-systemd.prerm | | blob
debian/libsystemd-dev.install | | blob
debian/libsystemd0.install | | blob
debian/libsystemd0.symbols | | blob
debian/libudev-dev.install | | blob
debian/libudev-dev.maintscript | | blob
debian/libudev1-udeb.install | | blob
debian/libudev1.install | | blob
debian/libudev1.symbols | | blob
debian/patches/Fix-typo-in-function-name.patch | | blob
debian/patches/Re-add-uaccess-tag-for-dev-dri-renderD.patch | | blob
debian/patches/ask-password-prevent-buffer-overflow-when-reading-from-ke.patch | | blob
debian/patches/bash-completion-use-default-completion-for-redirect-opera.patch | | blob
debian/patches/bus-polkit-rename-return-error-parameter-to-ret_error.patch | | blob
debian/patches/bus-util-treat-org.freedesktop.DBus.Error.ServiceUnknown-.patch | | blob
debian/patches/cgtop-Fix-processing-of-controllers-other-than-CPU.patch | | blob
debian/patches/core-change-ownership-mode-of-the-execution-directories-a.patch | | blob
debian/patches/core-factor-root_directory-application-out-of-apply_worki.patch | | blob
debian/patches/core-never-propagate-reload-failure-to-service-result.patch | | blob
debian/patches/core-set-fs.file-max-sysctl-to-LONG_MAX-rather-than-ULONG.patch | | blob
debian/patches/core-unset-HOME-that-the-kernel-gives-us.patch | | blob
debian/patches/debian/Add-env-variable-for-machine-ID-path.patch | | blob
debian/patches/debian/Add-support-for-TuxOnIce-hibernation.patch | | blob
debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch | | blob
debian/patches/debian/Don-t-enable-audit-by-default.patch | | blob
debian/patches/debian/Drop-seccomp-system-call-filter-for-udev.patch | | blob
debian/patches/debian/Let-graphical-session-pre.target-be-manually-started.patch | | blob
debian/patches/debian/Make-run-lock-tmpfs-an-API-fs.patch | | blob
debian/patches/debian/Only-start-logind-if-dbus-is-installed.patch | | blob
debian/patches/debian/Re-enable-journal-forwarding-to-syslog.patch | | blob
debian/patches/debian/Revert-core-enable-TasksMax-for-all-services-by-default-a.patch | | blob
debian/patches/debian/Revert-core-one-step-back-again-for-nspawn-we-actual.patch | | blob
debian/patches/debian/Revert-core-set-RLIMIT_CORE-to-unlimited-by-default.patch | | blob
debian/patches/debian/Revert-udev-network-device-renaming-immediately-give.patch | | blob
debian/patches/debian/Skip-filesystem-check-if-already-done-by-the-initram.patch | | blob
debian/patches/debian/Use-Debian-specific-config-files.patch | | blob
debian/patches/debian/fsckd-daemon-for-inter-fsckd-communication.patch | | blob
debian/patches/execute-remove-one-redundant-comparison-check.patch | | blob
debian/patches/journal-remote-do-not-request-Content-Length-if-Transfer-.patch | | blob
debian/patches/login-add-a-missing-error-check-for-session_set_leader.patch | | blob
debian/patches/man-add-note-that-h-u-U-are-mostly-useless.patch | | blob
debian/patches/meson-make-nologin-path-build-time-configurable.patch | | blob
debian/patches/mount-generators-do-not-make-unit-wanted-by-its-device-un.patch | | blob
debian/patches/mount-remove-unused-mount_is_auto-and-mount_is_automount.patch | | blob
debian/patches/namespace-make-MountFlags-shared-work-again.patch | | blob
debian/patches/network-check-whether-ipv6-is-enabled-in-sysctl.patch | | blob
debian/patches/network-do-not-remove-rule-when-it-is-requested-by-existi.patch | | blob
debian/patches/network-do-not-send-ipv6-token-to-kernel.patch | | blob
debian/patches/network-ignore-requested-ipv6-addresses-when-ipv6-is-disa.patch | | blob
debian/patches/network-ignore-requested-ipv6-route-when-ipv6-is-disabled.patch | | blob
debian/patches/network-ignore-requested-ipv6-routing-policy-rule-when-ip.patch | | blob
debian/patches/network-read-link-specific-sysctl-value.patch | | blob
debian/patches/network-remove-routing-policy-rule-from-foreign-rule-data.patch | | blob
debian/patches/networkd-clarify-that-IPv6-RA-uses-our-own-stack-no-the-k.patch | | blob
debian/patches/networkd-fix-link_up-12505.patch | | blob
debian/patches/networkd-test-disable-DNSSEC-in-domain-restricted-DNS-tes.patch | | blob
debian/patches/networkd-test-fix-test_dropin.patch | | blob
debian/patches/networkd-test-ignore-failures-of-test_route_only_dns-in-c.patch | | blob
debian/patches/networkd-test-use-a-complete-domain-name-in-test_route_on.patch | | blob
debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch | | blob
debian/patches/polkit-on-async-pk-requests-re-validate-action-details.patch | | blob
debian/patches/polkit-reuse-some-common-bus-message-appending-code.patch | | blob
debian/patches/polkit-use-structured-initialization.patch | | blob
debian/patches/polkit-when-authorizing-via-PK-let-s-re-resolve-callback-.patch | | blob
debian/patches/random-util-eat-up-bad-RDRAND-values-seen-on-AMD-CPUs.patch | | blob
debian/patches/remove-.-path-components-from-required-mount-paths.patch | | blob
debian/patches/resolve-fix-memleak.patch | | blob
debian/patches/sd-bus-enforce-a-size-limit-on-D-Bus-object-paths.patch | | blob
debian/patches/sd-bus-introduce-API-for-re-enqueuing-incoming-messages.patch | | blob
debian/patches/sd-device-also-store-properties-read-from-udev-database-t.patch | | blob
debian/patches/series | | blob
debian/patches/shared-bus-util-drop-trusted-annotation-from-bus_open_sys.patch | | blob
debian/patches/shared-seccomp-add-sync_file_range2.patch | | blob
debian/patches/shared-split-out-polkit-stuff-from-bus-util.c-bus-polkit..patch | | blob
debian/patches/sysctl-util-add-sysctl_read_ip_property.patch | | blob
debian/patches/systemctl-restore-systemctl-reboot-ARG-functionality.patch | | blob
debian/patches/timedate-fix-emitted-value-when-ntp-client-is-enabled-dis.patch | | blob
debian/patches/udev-network-drop-unused-parent_driver-argument-from-net_.patch | | blob
debian/patches/udev-restore-debug-level-when-logging-a-failure-in-the-ex.patch | | blob
debian/patches/udev-run-programs-in-the-specified-order.patch | | blob
debian/rules | | blob
debian/shlibs.local.in | | blob
debian/source/format | | blob
debian/systemd-container.install | | blob
debian/systemd-container.maintscript | | blob
debian/systemd-container.postinst | | blob
debian/systemd-container.postrm | | blob
debian/systemd-coredump.install | | blob
debian/systemd-coredump.postinst | | blob
debian/systemd-coredump.prerm | | blob
debian/systemd-journal-remote.install | | blob
debian/systemd-journal-remote.postinst | | blob
debian/systemd-sysv.install | | blob
debian/systemd-sysv.postinst | | blob
debian/systemd-tests.install | | blob
debian/systemd-tests.lintian-overrides | | blob
debian/systemd.NEWS | | blob
debian/systemd.bug-control | | blob
debian/systemd.bug-script | | blob
debian/systemd.dirs | | blob
debian/systemd.install | | blob
debian/systemd.links | | blob
debian/systemd.lintian-overrides | | blob
debian/systemd.maintscript | | blob
debian/systemd.postinst | | blob
debian/systemd.postrm | | blob
debian/systemd.prerm | | blob
debian/systemd.triggers | | blob
debian/tests/assert.sh | | blob
debian/tests/boot-and-services | | blob
debian/tests/boot-smoke | | blob
debian/tests/build-login | | blob
debian/tests/control | | blob
debian/tests/fsck | | blob
debian/tests/hostnamed | | blob
debian/tests/lidswitch.evemu | | blob
debian/tests/localed-locale | | blob
debian/tests/localed-x11-keymap | | blob
debian/tests/logind | | blob
debian/tests/process-killer | | blob
debian/tests/root-unittests | | blob
debian/tests/storage | | blob
debian/tests/systemd-fsckd | | blob
debian/tests/timedated | | blob
debian/tests/udev | | blob
debian/tests/unit-config | | blob
debian/tests/upstream | | blob
debian/udev-udeb.dirs | | blob
debian/udev-udeb.install | | blob
debian/udev.NEWS | | blob
debian/udev.README.Debian | | blob
debian/udev.bug-control | | blob
debian/udev.bug-script | | blob
debian/udev.init | | blob
debian/udev.install | | blob
debian/udev.links | | blob
debian/udev.maintscript | | blob
debian/udev.postinst | | blob
debian/udev.postrm | | blob
debian/udev.preinst | | blob
debian/udev.prerm | | blob
debian/udev.triggers | | blob
debian/watch | | blob
Unnamed repository; edit this file 'description' to name the repository.