-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 10 Apr 2019 21:34:06 +0200 Source: systemd Architecture: source Version: 241-3~bpo9+1 Distribution: stretch-backports Urgency: high Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org> Changed-By: Michael Biebl <biebl@debian.org> Closes: 815582 902026 908796 921280 923081 923881 924199 924406 924539 924541 925190 Changes: systemd (241-3~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports . systemd (241-3) unstable; urgency=high . [ Michael Biebl ] * Drop systemd-shim alternative from libpam-systemd. A fixed systemd-shim package which works with newer versions of systemd is unlikely to happen given that the systemd-shim package has been removed from the archive. Drop the alternative dependency from libpam-systemd accordingly. * Properly remove duplicate directories from systemd package. When removing duplicate directories from the systemd package, sort the list of directories in reverse order so we properly delete nested directories. * udev: Run programs in the specified order (Closes: #925190) * bash-completion: Use default completion for redirect operators (Closes: #924541) * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's (Closes: #815582) * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf" Apparently Conflicts= are not a reliable mechanism to ensure alternative NTP implementations take precedence over systemd-timesyncd. (Closes: #902026) * network: Fix routing policy rule issue. When multiple links request a routing policy, make sure they are all applied correctly. (Closes: #924406) * pam-systemd: Use secure_getenv() rather than getenv() Fixes a vulnerability in the systemd PAM module which insecurely uses the environment and lacks seat verification permitting spoofing an active session to PolicyKit. (CVE-2019-3842) . [ Martin Pitt ] * Enable udev autopkgtest in containers. This test doesn't actually need udev.service (which is disabled in containers) and works fine in LXC. * Enable boot-and-service autopkgtest in containers - Skip tests which can't work in containers. - Add missing rsyslog test dependency. - e2scrub_reap.service fails in containers, ignore (filed as #926138) - Relax pgrep pattern for gdm, as there's no wayland session in containers. . systemd (241-2) unstable; urgency=medium . [ Martin Pitt ] * debian/tests/boot-smoke: Create journal and udevdb artifacts on all failures * autopkgtests: Replace obsolete $ADT_* variables * networkd-test: Ignore failures of test_route_only_dns* in containers. This test exposes a race condition when running in LXC, see issue #11848 for details. Until that is understood and fixed, skip the test as it's not a recent regression. (Closes: #924539) * Bump Standards-Version to 4.3.0. No changes necessary. * debian/tests/boot-smoke: Only check current boot for connection timeouts. Otherwise we'll catch some Failed to resolve group 'render': Connection timed out messages that happen in earlier boots during VM setup, before the "render" group is created. Fixes https://github.com/systemd/systemd/issues/11875 * timedated: Fix emitted value when ntp client is enabled/disabled. Fixes a regression introduced in 241. * debian/tests/timedated: Check enabling/disabling NTP. Assert that `timedatectl set-ntp` correctly controls the service, sets the `org.freedesktop.timedate1 NTP` property, and sends the right `PropertiesChanged` signal. This reproduces <https://github.com/systemd/systemd/issues/11944> and also the earlier <https://github.com/systemd/systemd/issues/9672>. . [ Michael Biebl ] * Disable fallback DNS servers in resolved (Closes: #923081) * cgtop: Fix processing of controllers other than CPU (Closes: #921280) * udev: Restore debug level when logging a failure in the external prog called by IMPORT{program} (Closes: #924199) * core: Remove "." path components from required mount paths. Fixes mount related failures when a user's home directory contains "/./" (Closes: #923881) * udev.init: Use new s-s-d --notify-await to start udev daemon. Fixes a race condition during startup under SysV init. Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version of start-stop-daemon which supports --notify-await is installed. (Closes: #908796) * Make /dev/dri/renderD* accessible to group "render" Follow upstream and make render nodes available to a dedicated system group "render" instead of "video". Keep the uaccess tag for local, active users. Checksums-Sha1: 05448d3619c308f371e13795d040b8b251f1a5ca 4918 systemd_241-3~bpo9+1.dsc 0ab44d6a3dcd5daa57e1c4cc47ab85f6258afab7 153520 systemd_241-3~bpo9+1.debian.tar.xz daa93545e6f74460bb4bf7c686aaecaedd231526 9030 systemd_241-3~bpo9+1_source.buildinfo Checksums-Sha256: ac46f9976ef7466c59bd1e967af66a9f637b6d3ea32b1235fa1da20772ef2235 4918 systemd_241-3~bpo9+1.dsc 2ce505195015f46288e890b38d2026234fd27ff3b5a6dfafb466502492be5064 153520 systemd_241-3~bpo9+1.debian.tar.xz 2269c1d112a4d8ec48f5539a2373713ad24bfb7346243969ffb1cf2e35b4a439 9030 systemd_241-3~bpo9+1_source.buildinfo Files: 57ca24f5f9802efd99ddcc4acf8c1a78 4918 admin optional systemd_241-3~bpo9+1.dsc a4aef1ef6ffe56e960509a1fae304ee8 153520 admin optional systemd_241-3~bpo9+1.debian.tar.xz eb43bd8fdc2cebe000feda030550b623 9030 admin optional systemd_241-3~bpo9+1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAlyuShQACgkQauHfDWCP Ityl1w/+IP71ICAlXgKqevj17AMFgTg118q5cutklXc3HMNWqOvoanm7AWbpY8a1 H3weHGwAEpavcoYwDqt/VH8GhYqSeC/hrrwA5Zrucy0u4GXRLLTKTJfxkTLse5m1 CvK3I+PNdfFT/xe3DSQx6ZQy+PmS6uRkJxst0FBP+tL6kQEGYez/ocgK7LwfIEA4 bfa9nSjd6xD9v6D5E9iSVRhINtCvONDGd1cR/Peb8NX3yLlt57ZdDwdJVbV5CJhf 5O8qmD0AF55tEj8jPK+pJ6HvyV0ugFvLM2frPPcU3nTRszMSxZrVKsrHWTjL+nAS 4Iv+J/jyI+8ow+YQKrfeoma0D3bu+4Nzc7qirqLR6Rd+RManeqIfWYUAb0gxqtsI GK98vklIat2BBdhWXQ+fhAIs2Lb31i+iC7ACz9xgne9S3akJIbNnHI4HJphh/h8S Dlnbe8y4eaMJq1lqLiWLDLE6YPvFLe3y/71a523NfyBU+7GTbavdOp1SXZzs4Jmr wO55dRN7nvML8KEC32g+eEBgHSjvhlo+3+R8N1VgtecpdNmxGdJSZENCJKRbTZxR Ooo04v/OKDBKwZcBmcl/+T0Ww001rlfYqV0ftE/RJvnYLxcKw7EgHrnkh5/rySvV GdjHMMshXLPHtA27SE4945NnRDS1AZL+24i10VuuQF4e/WKf27o= =fgih -----END PGP SIGNATURE-----
