systemd (247.3-7+deb11u7) bullseye-security; urgency=medium
authorCarlos Henrique Lima Melara <charlesmelara@riseup.net>
Thu, 26 Jun 2025 00:44:53 +0000 (21:44 -0300)
committerCarlos Henrique Lima Melara <charlesmelara@riseup.net>
Thu, 26 Jun 2025 00:44:53 +0000 (21:44 -0300)
commite304f7e17104c77688d2b6ded0f78e31056ed671
tree9ef914e101bf603ae90f449b1e81a9799df8607c
parent891cdfe7fb6bb9994cf60eb44827f31488f40578
parent056bce0e661606da28c4407889eda05abad79ab0
systemd (247.3-7+deb11u7) bullseye-security; urgency=medium

  * Non-maintainer upload by the LTS Team.
  * debian/patches/:
    - CVE-2025-4598-{0,1,2,3,4}.patch: import and backport patches
      from upstream to fix CVE-2025-4598.
    - fix-stack-overflow-in-coredump-filter-{0,1,2}.patch: import and
      backport patches from upstream to fix CoredumpFilter=all overflow.
  * debian/salsa-ci.yml: add (E)LTS pipeline for bullseye.

[dgit import unpatched systemd 247.3-7+deb11u7]
213 files changed:
debian/README.Debian
debian/README.source
debian/changelog
debian/control
debian/copyright
debian/extra/checkout-upstream
debian/extra/dhclient-exit-hooks.d/timesyncd
debian/extra/fbdev-blacklist.conf
debian/extra/init-functions.d/40-systemd
debian/extra/initramfs-tools/hooks/udev
debian/extra/initramfs-tools/scripts/init-bottom/udev
debian/extra/initramfs-tools/scripts/init-top/udev
debian/extra/kernel-install.d/85-initrd.install
debian/extra/make-fbdev-blacklist
debian/extra/make-sysusers-basic
debian/extra/network/73-usb-net-by-mac.link
debian/extra/pam-configs/systemd
debian/extra/pam.d/systemd-user
debian/extra/rules-ubuntu/40-vm-hotadd.rules
debian/extra/rules-ubuntu/61-persistent-storage-android.rules
debian/extra/rules-ubuntu/71-power-switch-proliant.rules
debian/extra/rules-ubuntu/78-graphics-card.rules
debian/extra/rules/50-firmware.rules
debian/extra/rules/73-special-net-names.rules
debian/extra/rules/80-debian-compat.rules
debian/extra/start-udev
debian/extra/systemd-sysv-install
debian/extra/systemd.py
debian/extra/tmpfiles.d/debian.conf
debian/extra/udev.py
debian/extra/units-ubuntu/user@.service.d/timeout.conf
debian/extra/units/getty-static.service
debian/extra/units/rc-local.service.d/debian.conf
debian/extra/units/systemd-localed.service.d/locale-gen.conf
debian/gbp.conf
debian/git-cherry-pick
debian/libnss-myhostname.install
debian/libnss-myhostname.lintian-overrides
debian/libnss-myhostname.postinst
debian/libnss-myhostname.postrm
debian/libnss-mymachines.install
debian/libnss-mymachines.lintian-overrides
debian/libnss-mymachines.postinst
debian/libnss-mymachines.postrm
debian/libnss-resolve.install
debian/libnss-resolve.lintian-overrides
debian/libnss-resolve.postinst
debian/libnss-resolve.postrm
debian/libnss-systemd.install
debian/libnss-systemd.lintian-overrides
debian/libnss-systemd.postinst
debian/libnss-systemd.postrm
debian/libpam-systemd.install
debian/libpam-systemd.postinst
debian/libpam-systemd.prerm
debian/libsystemd-dev.install
debian/libsystemd0.install
debian/libsystemd0.symbols
debian/libudev-dev.install
debian/libudev1-udeb.install
debian/libudev1.install
debian/libudev1.symbols
debian/patches/0001-resolved-actually-check-authenticated-flag-of-SOA-tr.patch
debian/patches/0002-resolved-limit-the-number-of-signature-validations-i.patch
debian/patches/0003-resolved-reduce-the-maximum-nsec3-iterations-to-100.patch
debian/patches/Add-helper-for-case-independent-string-equality-checks.patch
debian/patches/Always-free-deserialized_subscribed-on-reload.patch
debian/patches/CVE-2025-4598-0.patch
debian/patches/CVE-2025-4598-1.patch
debian/patches/CVE-2025-4598-2.patch
debian/patches/CVE-2025-4598-3.patch
debian/patches/CVE-2025-4598-4.patch
debian/patches/Drop-bundled-copy-of-linux-if_arp.h.patch
debian/patches/LoadCredentials-do-not-assert-on-invalid-syntax.patch
debian/patches/Revert-udev-do-not-execute-hwdb-builtin-import-twice-or-t.patch
debian/patches/analyze-slightly-reword-PrivateTmp-message.patch
debian/patches/ata_id-Fixed-getting-Response-Code-from-SCSI-Sense-Data-2.patch
debian/patches/basic-add-make_mount_point_inode-helper.patch
debian/patches/basic-unit-name-adjust-comments.patch
debian/patches/basic-unit-name-do-not-use-strdupa-on-a-path.patch
debian/patches/btrfs-util-add-helper-that-abstracts-might-be-btrfs-subvo.patch
debian/patches/core-fix-mtime-calculation-of-dropin-files.patch
debian/patches/coredump-do-not-allow-user-to-access-coredumps-with-chang.patch
debian/patches/debian/Add-env-variable-for-machine-ID-path.patch
debian/patches/debian/Add-support-for-TuxOnIce-hibernation.patch
debian/patches/debian/Bring-tmpfiles.d-tmp.conf-in-line-with-Debian-defaul.patch
debian/patches/debian/Don-t-enable-audit-by-default.patch
debian/patches/debian/Downgrade-a-couple-of-warnings-to-debug.patch
debian/patches/debian/Drop-seccomp-system-call-filter-for-udev.patch
debian/patches/debian/Keep-journal-files-compatible-with-older-versions.patch
debian/patches/debian/Let-graphical-session-pre.target-be-manually-started.patch
debian/patches/debian/Make-run-lock-tmpfs-an-API-fs.patch
debian/patches/debian/Move-sysusers.d-sysctl.d-binfmt.d-modules-load.d-back-to-.patch
debian/patches/debian/Only-start-logind-if-dbus-is-installed.patch
debian/patches/debian/Re-enable-journal-forwarding-to-syslog.patch
debian/patches/debian/Revert-core-one-step-back-again-for-nspawn-we-actual.patch
debian/patches/debian/Revert-core-set-RLIMIT_CORE-to-unlimited-by-default.patch
debian/patches/debian/Revert-udev-fix-memleak.patch
debian/patches/debian/Revert-udev-link_update-should-fail-if-the-entry-in-symli.patch
debian/patches/debian/Revert-udev-make-algorithm-that-selects-highest-priority-.patch
debian/patches/debian/Skip-filesystem-check-if-already-done-by-the-initram.patch
debian/patches/debian/Use-Debian-specific-config-files.patch
debian/patches/debian/deny-list-upstream-test-02-ppc64el.patch
debian/patches/debian/deny-list-upstream-test-25.patch
debian/patches/debian/fsckd-daemon-for-inter-fsckd-communication.patch
debian/patches/debian/systemctl-do-not-shutdown-immediately-on-scheduled-shutdo.patch
debian/patches/debian/test-disable-DnsmasqClientTest.test_resolved_etc_hosts-in.patch
debian/patches/debian/udev-drop-SystemCallArchitectures-native-from-systemd-ude.patch
debian/patches/fix-stack-overflow-in-coredump-filter-0.patch
debian/patches/fix-stack-overflow-in-coredump-filter-1.patch
debian/patches/fix-stack-overflow-in-coredump-filter-2.patch
debian/patches/localed-Run-locale-gen-if-available-to-generate-missing-l.patch
debian/patches/logind-fix-getting-property-OnExternalPower-via-D-Bus.patch
debian/patches/machine-adjust-error-message-to-use-normalized-instead-of.patch
debian/patches/machine-basic-factor-out-helper-function-to-add-airlocked.patch
debian/patches/machine-enter-target-PID-namespace-when-adding-a-live-mou.patch
debian/patches/machined-varlink-fix-double-free.patch
debian/patches/meson-drop-arch-filtering-in-syscall-list.patch
debian/patches/network-Delay-addition-of-IPv6-Proxy-NDP-addresses.patch
debian/patches/pkg-config-make-prefix-overridable-again.patch
debian/patches/rm-rf-fstatat-might-fail-if-containing-dir-has-limited-ac.patch
debian/patches/rm-rf-optionally-fsync-after-removing-directory-tree.patch
debian/patches/rm-rf-refactor-rm_rf_children-split-out-body-of-directory.patch
debian/patches/rules-Move-ID_SMARTCARD_READER-definition-to-a-70-configu.patch
debian/patches/series
debian/patches/shared-calendarspec-abort-calculation-after-1000-iteratio.patch
debian/patches/shared-calendarspec-when-mktime-moves-us-backwards-jump-f.patch
debian/patches/shared-mount-util-use-namespace_fork-utils.patch
debian/patches/shared-rm-rf-loop-over-nested-directories-instead-of-inst.patch
debian/patches/shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
debian/patches/shared-rm_rf-refactor-rm_rf_children_inner-to-shorten-cod.patch
debian/patches/table-drop-trailing-white-spaces-of-the-last-cell-in-row.patch
debian/patches/test-unset-TZ-before-timezone-sensitive-unit-tests-are-ru.patch
debian/patches/time-util-fix-buffer-over-run.patch
debian/patches/tmpfiles-st-may-have-been-used-uninitialized.patch
debian/patches/udev-always-create-device-symlinks-for-USB-disks.patch
debian/patches/udev-first-set-properties-based-on-usb-subsystem.patch
debian/patches/udevadm-trigger-do-not-return-immediately-on-EACCES.patch
debian/patches/unit-name-generate-a-clear-error-code-when-convertin.patch
debian/patches/virt-Fix-the-detection-for-Hyper-V-VMs.patch
debian/patches/virt-Support-detection-for-ARM64-Hyper-V-guests.patch
debian/patches/virt-detect-OpenStack-Nova-instance.patch
debian/rules
debian/salsa-ci.yml
debian/shlibs.local.in
debian/source/format
debian/systemd-container.install
debian/systemd-container.lintian-overrides
debian/systemd-container.maintscript
debian/systemd-container.postinst
debian/systemd-container.postrm
debian/systemd-coredump.install
debian/systemd-coredump.postinst
debian/systemd-coredump.prerm
debian/systemd-journal-remote.install
debian/systemd-journal-remote.postinst
debian/systemd-sysv.install
debian/systemd-sysv.postinst
debian/systemd-tests.install
debian/systemd-tests.lintian-overrides
debian/systemd-timesyncd.install
debian/systemd-timesyncd.postinst
debian/systemd-timesyncd.postrm
debian/systemd.NEWS
debian/systemd.bug-control
debian/systemd.bug-script
debian/systemd.dirs
debian/systemd.install
debian/systemd.links
debian/systemd.lintian-overrides
debian/systemd.maintscript
debian/systemd.postinst
debian/systemd.postrm
debian/systemd.preinst
debian/systemd.prerm
debian/systemd.triggers
debian/tests/assert.sh
debian/tests/boot-and-services
debian/tests/boot-smoke
debian/tests/build-login
debian/tests/control
debian/tests/fsck
debian/tests/hostnamed
debian/tests/lidswitch.evemu
debian/tests/localed-locale
debian/tests/localed-x11-keymap
debian/tests/logind
debian/tests/process-killer
debian/tests/root-unittests
debian/tests/storage
debian/tests/systemd-fsckd
debian/tests/timedated
debian/tests/udev
debian/tests/unit-config
debian/tests/upstream
debian/udev-udeb.dirs
debian/udev-udeb.install
debian/udev.NEWS
debian/udev.README.Debian
debian/udev.bug-control
debian/udev.bug-script
debian/udev.init
debian/udev.install
debian/udev.links
debian/udev.lintian-overrides
debian/udev.maintscript
debian/udev.postinst
debian/udev.postrm
debian/udev.preinst
debian/udev.prerm
debian/udev.triggers
debian/upstream/metadata
debian/watch