projects / systemd.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 77e0b05 213a58f)
systemd (241-7~deb10u9) buster-security; urgency=medium
authorAdrian Bunk <bunk@debian.org>
Thu, 30 Mar 2023 19:32:31 +0000 (20:32 +0100)
committerAdrian Bunk <bunk@debian.org>
Thu, 30 Mar 2023 19:32:31 +0000 (20:32 +0100)
commitca131cf5345798de6ed73e2cd722e82402303dda
tree10955c3ab320fd3fedfb985454e84519bbdb4bd5tree | snapshot
parent77e0b057c3794fd06dd68dd3fc7cd754d99c1e76commit | diff
parent213a58f8ad22365df8973c89883464c41dbf2dd0commit | diff
systemd (241-7~deb10u9) buster-security; urgency=medium

  * Non-maintainer upload by the LTS Security Team.
  * CVE-2023-26604: Local privilege escalation for some sudo
    configurations.

[dgit import unpatched systemd 241-7~deb10u9]
214 files changed:
debian/README.Debian | | blob
debian/README.source | | blob
debian/changelog | | blob
debian/compat | | blob
debian/control | | blob
debian/copyright | | blob
debian/extra/checkout-upstream | | blob
debian/extra/dhclient-exit-hooks.d/timesyncd | | blob
debian/extra/fbdev-blacklist.conf | | blob
debian/extra/init-functions.d/40-systemd | | blob
debian/extra/initramfs-tools/hooks/udev | | blob
debian/extra/initramfs-tools/scripts/init-bottom/udev | | blob
debian/extra/initramfs-tools/scripts/init-top/udev | | blob
debian/extra/kernel-install.d/85-initrd.install | | blob
debian/extra/make-fbdev-blacklist | | blob
debian/extra/make-sysusers-basic | | blob
debian/extra/pam-configs/systemd | | blob
debian/extra/pam.d/systemd-user | | blob
debian/extra/rules-ubuntu/40-vm-hotadd.rules | | blob
debian/extra/rules-ubuntu/61-persistent-storage-android.rules | | blob
debian/extra/rules-ubuntu/71-power-switch-proliant.rules | | blob
debian/extra/rules-ubuntu/78-graphics-card.rules | | blob
debian/extra/rules/50-firmware.rules | | blob
debian/extra/rules/73-special-net-names.rules | | blob
debian/extra/rules/73-usb-net-by-mac.rules | | blob
debian/extra/rules/80-debian-compat.rules | | blob
debian/extra/set-cpufreq | | blob
debian/extra/start-udev | | blob
debian/extra/systemd-sysv-install | | blob
debian/extra/systemd.py | | blob
debian/extra/tmpfiles.d/debian.conf | | blob
debian/extra/udev.py | | blob
debian/extra/units-ubuntu/ondemand.service | | blob
debian/extra/units-ubuntu/user@.service.d/timeout.conf | | blob
debian/extra/units/getty-static.service | | blob
debian/extra/units/rc-local.service.d/debian.conf | | blob
debian/extra/units/systemd-resolved.service.d/resolvconf.conf | | blob
debian/extra/units/systemd-timesyncd.service.d/disable-with-time-daemon.conf | | blob
debian/gbp.conf | | blob
debian/git-cherry-pick | | blob
debian/libnss-myhostname.install | | blob
debian/libnss-myhostname.lintian-overrides | | blob
debian/libnss-myhostname.postinst | | blob
debian/libnss-myhostname.postrm | | blob
debian/libnss-mymachines.install | | blob
debian/libnss-mymachines.lintian-overrides | | blob
debian/libnss-mymachines.postinst | | blob
debian/libnss-mymachines.postrm | | blob
debian/libnss-resolve.install | | blob
debian/libnss-resolve.lintian-overrides | | blob
debian/libnss-resolve.postinst | | blob
debian/libnss-resolve.postrm | | blob
debian/libnss-systemd.install | | blob
debian/libnss-systemd.lintian-overrides | | blob
debian/libnss-systemd.postinst | | blob
debian/libnss-systemd.postrm | | blob
debian/libpam-systemd.install | | blob
debian/libpam-systemd.postinst | | blob
debian/libpam-systemd.prerm | | blob
debian/libsystemd-dev.install | | blob
debian/libsystemd0.install | | blob
debian/libsystemd0.symbols | | blob
debian/libudev-dev.install | | blob
debian/libudev-dev.maintscript | | blob
debian/libudev1-udeb.install | | blob
debian/libudev1.install | | blob
debian/libudev1.symbols | | blob
debian/patches/0001-man-share-description-of-SYSTEMD_COLORS-in-other-too.patch | | blob
debian/patches/0002-pager-set-LESSSECURE-whenver-we-invoke-a-pager.patch | | blob
debian/patches/0003-pager-Fix-deadlock-when-using-built-in-pager.patch | | blob
debian/patches/0004-pager-make-pager-secure-when-under-euid-is-changed-o.patch | | blob
debian/patches/Fix-typo-in-function-name.patch | | blob
debian/patches/Re-add-uaccess-tag-for-dev-dri-renderD.patch | | blob
debian/patches/ask-password-prevent-buffer-overflow-when-reading-from-ke.patch | | blob
debian/patches/bash-completion-use-default-completion-for-redirect-opera.patch | | blob
debian/patches/basic-cap-list-parse-print-numerical-capabilities.patch | | blob
debian/patches/basic-unit-name-do-not-use-strdupa-on-a-path.patch | | blob
debian/patches/bus-polkit-rename-return-error-parameter-to-ret_error.patch | | blob
debian/patches/bus-util-treat-org.freedesktop.DBus.Error.ServiceUnknown-.patch | | blob
debian/patches/cgtop-Fix-processing-of-controllers-other-than-CPU.patch | | blob
debian/patches/core-change-ownership-mode-of-the-execution-directories-a.patch | | blob
debian/patches/core-factor-root_directory-application-out-of-apply_worki.patch | | blob
debian/patches/core-make-sure-to-restore-the-control-command-id-too.patch | | blob
debian/patches/core-never-propagate-reload-failure-to-service-result.patch | | blob
debian/patches/core-set-fs.file-max-sysctl-to-LONG_MAX-rather-than-ULONG.patch | | blob
debian/patches/core-unset-HOME-that-the-kernel-gives-us.patch | | blob
debian/patches/debian/Add-env-variable-for-machine-ID-path.patch | | blob
debian/patches/debian/Add-support-for-TuxOnIce-hibernation.patch | | blob
debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch | | blob
debian/patches/debian/Don-t-enable-audit-by-default.patch | | blob
debian/patches/debian/Drop-seccomp-system-call-filter-for-udev.patch | | blob
debian/patches/debian/Let-graphical-session-pre.target-be-manually-started.patch | | blob
debian/patches/debian/Make-run-lock-tmpfs-an-API-fs.patch | | blob
debian/patches/debian/Only-start-logind-if-dbus-is-installed.patch | | blob
debian/patches/debian/Re-enable-journal-forwarding-to-syslog.patch | | blob
debian/patches/debian/Revert-core-enable-TasksMax-for-all-services-by-default-a.patch | | blob
debian/patches/debian/Revert-core-one-step-back-again-for-nspawn-we-actual.patch | | blob
debian/patches/debian/Revert-core-set-RLIMIT_CORE-to-unlimited-by-default.patch | | blob
debian/patches/debian/Revert-udev-network-device-renaming-immediately-give.patch | | blob
debian/patches/debian/Skip-filesystem-check-if-already-done-by-the-initram.patch | | blob
debian/patches/debian/Use-Debian-specific-config-files.patch | | blob
debian/patches/debian/fsckd-daemon-for-inter-fsckd-communication.patch | | blob
debian/patches/execute-remove-one-redundant-comparison-check.patch | | blob
debian/patches/journal-do-not-trigger-assertion-when-journal_file_close-.patch | | blob
debian/patches/journal-remote-do-not-request-Content-Length-if-Transfer-.patch | | blob
debian/patches/login-add-a-missing-error-check-for-session_set_leader.patch | | blob
debian/patches/man-add-note-that-h-u-U-are-mostly-useless.patch | | blob
debian/patches/meson-make-nologin-path-build-time-configurable.patch | | blob
debian/patches/missing-Add-new-Linux-capabilities.patch | | blob
debian/patches/mount-generators-do-not-make-unit-wanted-by-its-device-un.patch | | blob
debian/patches/mount-remove-unused-mount_is_auto-and-mount_is_automount.patch | | blob
debian/patches/namespace-make-MountFlags-shared-work-again.patch | | blob
debian/patches/network-check-whether-ipv6-is-enabled-in-sysctl.patch | | blob
debian/patches/network-do-not-remove-rule-when-it-is-requested-by-existi.patch | | blob
debian/patches/network-do-not-send-ipv6-token-to-kernel.patch | | blob
debian/patches/network-ignore-requested-ipv6-addresses-when-ipv6-is-disa.patch | | blob
debian/patches/network-ignore-requested-ipv6-route-when-ipv6-is-disabled.patch | | blob
debian/patches/network-ignore-requested-ipv6-routing-policy-rule-when-ip.patch | | blob
debian/patches/network-read-link-specific-sysctl-value.patch | | blob
debian/patches/network-remove-routing-policy-rule-from-foreign-rule-data.patch | | blob
debian/patches/networkd-clarify-that-IPv6-RA-uses-our-own-stack-no-the-k.patch | | blob
debian/patches/networkd-do-not-generate-MAC-for-bridge-device.patch | | blob
debian/patches/networkd-fix-link_up-12505.patch | | blob
debian/patches/networkd-test-disable-DNSSEC-in-domain-restricted-DNS-tes.patch | | blob
debian/patches/networkd-test-fix-test_dropin.patch | | blob
debian/patches/networkd-test-ignore-failures-of-test_route_only_dns-in-c.patch | | blob
debian/patches/networkd-test-use-a-complete-domain-name-in-test_route_on.patch | | blob
debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch | | blob
debian/patches/polkit-on-async-pk-requests-re-validate-action-details.patch | | blob
debian/patches/polkit-reuse-some-common-bus-message-appending-code.patch | | blob
debian/patches/polkit-use-structured-initialization.patch | | blob
debian/patches/polkit-when-authorizing-via-PK-let-s-re-resolve-callback-.patch | | blob
debian/patches/random-util-eat-up-bad-RDRAND-values-seen-on-AMD-CPUs.patch | | blob
debian/patches/remove-.-path-components-from-required-mount-paths.patch | | blob
debian/patches/resolve-fix-memleak.patch | | blob
debian/patches/sd-bus-enforce-a-size-limit-on-D-Bus-object-paths.patch | | blob
debian/patches/sd-bus-introduce-API-for-re-enqueuing-incoming-messages.patch | | blob
debian/patches/sd-device-also-store-properties-read-from-udev-database-t.patch | | blob
debian/patches/seccomp-allow-turning-off-of-seccomp-filtering-via-env-va.patch | | blob
debian/patches/series | | blob
debian/patches/shared-bus-util-drop-trusted-annotation-from-bus_open_sys.patch | | blob
debian/patches/shared-seccomp-add-sync_file_range2.patch | | blob
debian/patches/shared-split-out-polkit-stuff-from-bus-util.c-bus-polkit..patch | | blob
debian/patches/sysctl-util-add-sysctl_read_ip_property.patch | | blob
debian/patches/systemctl-restore-systemctl-reboot-ARG-functionality.patch | | blob
debian/patches/test-bpf-skip-test-when-run-inside-containers.patch | | blob
debian/patches/tests-skip-test-bpf-only-when-we-re-100-sure-it-s-run-in-.patch | | blob
debian/patches/timedate-fix-emitted-value-when-ntp-client-is-enabled-dis.patch | | blob
debian/patches/udev-network-drop-unused-parent_driver-argument-from-net_.patch | | blob
debian/patches/udev-restore-debug-level-when-logging-a-failure-in-the-ex.patch | | blob
debian/patches/udev-run-programs-in-the-specified-order.patch | | blob
debian/rules | | blob
debian/shlibs.local.in | | blob
debian/source/format | | blob
debian/systemd-container.install | | blob
debian/systemd-container.maintscript | | blob
debian/systemd-container.postinst | | blob
debian/systemd-container.postrm | | blob
debian/systemd-coredump.install | | blob
debian/systemd-coredump.postinst | | blob
debian/systemd-coredump.prerm | | blob
debian/systemd-journal-remote.install | | blob
debian/systemd-journal-remote.postinst | | blob
debian/systemd-sysv.install | | blob
debian/systemd-sysv.postinst | | blob
debian/systemd-tests.install | | blob
debian/systemd-tests.lintian-overrides | | blob
debian/systemd.NEWS | | blob
debian/systemd.bug-control | | blob
debian/systemd.bug-script | | blob
debian/systemd.dirs | | blob
debian/systemd.install | | blob
debian/systemd.links | | blob
debian/systemd.lintian-overrides | | blob
debian/systemd.maintscript | | blob
debian/systemd.postinst | | blob
debian/systemd.postrm | | blob
debian/systemd.prerm | | blob
debian/systemd.triggers | | blob
debian/tests/assert.sh | | blob
debian/tests/boot-and-services | | blob
debian/tests/boot-smoke | | blob
debian/tests/build-login | | blob
debian/tests/control | | blob
debian/tests/fsck | | blob
debian/tests/hostnamed | | blob
debian/tests/lidswitch.evemu | | blob
debian/tests/localed-locale | | blob
debian/tests/localed-x11-keymap | | blob
debian/tests/logind | | blob
debian/tests/process-killer | | blob
debian/tests/root-unittests | | blob
debian/tests/storage | | blob
debian/tests/systemd-fsckd | | blob
debian/tests/timedated | | blob
debian/tests/udev | | blob
debian/tests/unit-config | | blob
debian/tests/upstream | | blob
debian/udev-udeb.dirs | | blob
debian/udev-udeb.install | | blob
debian/udev.NEWS | | blob
debian/udev.README.Debian | | blob
debian/udev.bug-control | | blob
debian/udev.bug-script | | blob
debian/udev.init | | blob
debian/udev.install | | blob
debian/udev.links | | blob
debian/udev.maintscript | | blob
debian/udev.postinst | | blob
debian/udev.postrm | | blob
debian/udev.preinst | | blob
debian/udev.prerm | | blob
debian/udev.triggers | | blob
debian/watch | | blob
Unnamed repository; edit this file 'description' to name the repository.