systemd.git
6 years agonetworkd-test: disable DNSSEC in domain-restricted DNS test
Martin Pitt [Thu, 21 Feb 2019 11:24:16 +0000 (12:24 +0100)]
networkd-test: disable DNSSEC in domain-restricted DNS test

dnsmasq 2.80 changed behaviour when being queried by resolved with
enabled DNSSEC: It returns errors for SOA and DS queries which cause the
entire query to fail. As we don't configure DNSSEC in this test anyway,
just disable it so that we retain compatibility with old and new dnsmasq
versions.

(cherry picked from commit 6592c9c850675fb20236271efc4f65acbe3bfa00)

Gbp-Pq: Name networkd-test-disable-DNSSEC-in-domain-restricted-DNS-tes.patch

6 years agosd-device: also store properties read from udev database to sd_device::properties_db
Yu Watanabe [Fri, 15 Feb 2019 20:21:59 +0000 (05:21 +0900)]
sd-device: also store properties read from udev database to sd_device::properties_db

Follow-up for a3ce813697bcc1c4644e097a2f1cd0459326d6ee and
5ce41697bd3ddc19cd6e1e6834751082ca0c8b02.

Before a3ce813697bcc1c4644e097a2f1cd0459326d6ee, all properties in
src->properties and src->properties_db are mixed and copied to
dst->properties_db by device_copy_properties().
So, it is not necessary to store data from udev database file to
sd_device::properties_db before copying properties.

But now, properties are not mixed. So, the read data need to be
stored to also ::properties_db.

Fixes #11721.

(cherry picked from commit 03dd7b7ddec1b0e06f254972a2e05f516a05edaf)

Gbp-Pq: Name sd-device-also-store-properties-read-from-udev-database-t.patch

6 years agoudev,network: drop unused parent_driver argument from net_match_config()
Yu Watanabe [Sat, 16 Feb 2019 15:47:45 +0000 (00:47 +0900)]
udev,network: drop unused parent_driver argument from net_match_config()

The argument has never been used.

(cherry picked from commit 4f4daf418f2e750caae6bc26cd49daafc23ad4de)

Gbp-Pq: Name udev-network-drop-unused-parent_driver-argument-from-net_.patch

6 years agosd-bus: enforce a size limit on D-Bus object paths
Martin Pitt [Sun, 17 Feb 2019 09:17:45 +0000 (10:17 +0100)]
sd-bus: enforce a size limit on D-Bus object paths

Replace stack with heap allocation. This avoids accessing/modifying
memory outside of the allocated stack region by sending specially
crafted D-Bus messages with very large object paths.

Vulnerability discovered by Chris Coulson <chris.coulson@canonical.com>,
patch provided by Riccardo Schirone <rschiron@redhat.com>.

CVE-2019-6454

Gbp-Pq: Name sd-bus-enforce-a-size-limit-on-D-Bus-object-paths.patch

6 years agosystemd (241-7~deb10u1) buster; urgency=medium
Michael Biebl [Tue, 20 Aug 2019 11:50:42 +0000 (12:50 +0100)]
systemd (241-7~deb10u1) buster; urgency=medium

  * Rebuild for buster

[dgit import unpatched systemd 241-7~deb10u1]

6 years agoImport systemd_241-7~deb10u1.debian.tar.xz
Michael Biebl [Tue, 20 Aug 2019 11:50:42 +0000 (12:50 +0100)]
Import systemd_241-7~deb10u1.debian.tar.xz

[dgit import tarball systemd 241-7~deb10u1 systemd_241-7~deb10u1.debian.tar.xz]

6 years agoImport systemd_241.orig.tar.gz
Felipe Sateler [Thu, 21 Feb 2019 23:10:15 +0000 (23:10 +0000)]
Import systemd_241.orig.tar.gz

[dgit import orig systemd_241.orig.tar.gz]