Debian Package Tracker

general

source: systemd (main)
version: 239-12
maintainer: Debian systemd Maintainers (archive) [DMD]
uploaders: Martin Pitt [DMD] – Marco d'Itri [DMD] – Michael Biebl [DMD] – Sjoerd Simons [DMD]
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 44-11+deb7u4
o-o-sec: 44-11+deb7u5
o-o-bpo: 204-14~bpo70+1
oldstable: 215-17+deb8u7
old-bpo: 230-7~bpo8+2
stable: 232-25+deb9u6
stable-bpo: 239-12~bpo9+1
testing: 239-11
unstable: 239-12

versioned links

44-11+deb7u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
44-11+deb7u5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
204-14~bpo70+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
215-17+deb8u7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
230-7~bpo8+2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
232-25+deb9u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
237-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
239-11~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
239-11: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
239-12~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
239-12: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libnss-myhostname
libnss-mymachines
libnss-resolve
libnss-systemd
libpam-systemd
libsystemd-dev
libsystemd0
libudev-dev
libudev1
libudev1-udeb
systemd
systemd-container
systemd-coredump
systemd-journal-remote
systemd-sysv
systemd-tests
udev
udev-udeb

action needed

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.

Please fix it.

Created: 2018-10-27 Last update: 2018-11-19 22:47

4 security issues in jessie high

There are 4 open security issues in jessie.

3 important issues:

CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
CVE-2018-1049: In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.
CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

1 issue skipped by the security teams:

CVE-2018-6954: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.

Please fix them.

Created: 2018-01-17 Last update: 2018-11-19 22:47

Debci reports failed tests (log) high

Debci reports test failures (log).

The tests ran in 0h 8m 5s

Last run: 2018-11-18 20:57:32

Previous status: fail

Created: 2018-10-20 Last update: 2018-11-19 22:11

12 bugs tagged help in the BTS normal

The BTS contains 12 bugs tagged help, please consider helping the maintainer in dealing with them.

Created: 2017-08-29 Last update: 2018-11-19 21:10

5 bugs tagged patch in the BTS normal

The BTS contains patches fixing 5 bugs, consider including or untagging them.

Created: 2018-10-01 Last update: 2018-11-19 21:10

4 new commits since last upload, time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 973881639847c213cdb32ae3c8a1bdd08d09936f
Author: Michael Biebl <biebl@debian.org>
Date:   Mon Nov 19 19:45:02 2018 +0100

    Drop cgroup-don-t-trim-cgroup-trees-created-by-someone-el.patch
    
    The patch is no longer necessary as lxc.service now uses Delegate=yes.

commit 464910e4d618fafc43dad159aa6fc62643ad6ac7
Author: Michael Biebl <biebl@debian.org>
Date:   Mon Nov 19 17:49:38 2018 +0100

    pam_systemd: Suppress LOG_DEBUG log messages if debugging is off
    
    Closes: #825949

commit fc8847c12b63236904a28de360a40d437d9ef9d8
Author: Michael Biebl <biebl@debian.org>
Date:   Sun Nov 18 14:43:03 2018 +0100

    systemctl: Tell update-rc.d to skip creating any systemd symlinks
    
    When calling update-rc.d via systemd-sysv-install, tell it to skip
    creating any systemd symlinks as we want to handle those directly in
    systemctl. Older update-rc.d versions will ignore that request, but
    that's ok. This means we don't need a versioned dependency against
    init-system-helpers.
    
    Closes: #743217

commit b5c1aba27e61a97f8981cd3524703ca79caf67b7
Author: Michael Biebl <biebl@debian.org>
Date:   Sat Nov 17 22:59:12 2018 +0100

    autopktest: Add e2fsprogs dependency to upstream test
    
    Some of the upstream tests require mkfs.ext4.
    
    Closes: #887250

Created: 2018-11-01 Last update: 2018-11-19 19:09

Depends on packages which need a new maintainer normal

The packages that systemd depends on which need a new maintainer are:

systemd-shim (#832508)
- Depends: systemd-shim
docbook-xml (#802368)
- Build-Depends: docbook-xml
docbook-xsl (#802370)
- Build-Depends: docbook-xsl

Created: 2017-12-02 Last update: 2018-11-19 19:01

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2018-11-02 Last update: 2018-11-19 18:28

lintian reports 88 warnings normal

Lintian reports 88 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2018-09-13 Last update: 2018-09-13 08:11

3 ignored security issues in stretch low

There are 3 open security issues in stretch.

3 issues skipped by the security teams:

CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
CVE-2018-6954: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
CVE-2018-1049: In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.

Please fix them.

Created: 2017-10-27 Last update: 2018-11-19 22:47

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:23

testing migrations

excuses:
- 2 days old (2 needed)
- missing build on mips64el: libnss-myhostname, libnss-mymachines, libnss-resolve, libnss-systemd, libpam-systemd, libsystemd-dev, libsystemd0, libudev-dev, libudev1, libudev1-udeb, systemd, systemd-container, systemd-coredump, systemd-journal-remote, systemd-sysv, systemd-tests, udev, udev-udeb (from 239-11)
- missing build on mipsel: libnss-myhostname, libnss-mymachines, libnss-resolve, libnss-systemd, libpam-systemd, libsystemd-dev, libsystemd0, libudev-dev, libudev1, libudev1-udeb, systemd, systemd-container, systemd-coredump, systemd-journal-remote, systemd-sysv, systemd-tests, udev, udev-udeb (from 239-11)
- Piuparts tested OK - https://piuparts.debian.org/sid/source/s/systemd.html
- autopkgtest for syslog-ng/3.13.2-5: amd64: Ignored failure
- Required age reduced by 3 days because of autopkgtest
- Required age is not allowed to drop below 2 days
- Not considered

news

[rss feed]

[2018-11-17] Accepted systemd 239-12~bpo9+1 (source) into stretch-backports (Michael Biebl)
[2018-11-17] Accepted systemd 239-12 (source) into unstable (Michael Biebl)
[2018-11-02] Accepted systemd 232-25+deb9u6 (source) into proposed-updates->stable-new, proposed-updates (Michael Biebl)
[2018-10-31] systemd 239-11 MIGRATED to testing (Debian testing watch)
[2018-10-28] Accepted systemd 239-11~bpo9+1 (source) into stretch-backports (Michael Biebl)
[2018-10-28] Accepted systemd 239-11 (source) into unstable (Michael Biebl)
[2018-10-09] Accepted systemd 239-7~bpo9+1 (source) into stretch-backports (Michael Biebl)
[2018-10-06] Accepted systemd 232-25+deb9u5 (source) into proposed-updates->stable-new, proposed-updates (Michael Biebl)
[2018-09-28] systemd 239-10 MIGRATED to testing (Debian testing watch)
[2018-09-25] Accepted systemd 239-10 (source) into unstable (Michael Biebl)
[2018-09-15] systemd 239-9 MIGRATED to testing (Debian testing watch)
[2018-09-12] Accepted systemd 239-9 (source) into unstable (Michael Biebl)
[2018-09-09] systemd 239-8 MIGRATED to testing (Debian testing watch)
[2018-09-07] Accepted systemd 239-8 (source) into unstable (Michael Biebl)
[2018-07-24] systemd 239-7 MIGRATED to testing (Debian testing watch)
[2018-07-22] Accepted systemd 239-7 (source) into unstable (Michael Biebl)
[2018-07-21] systemd 239-6 MIGRATED to testing (Debian testing watch)
[2018-07-19] Accepted systemd 239-6 (source) into unstable (Michael Biebl)
[2018-07-08] systemd 239-5 MIGRATED to testing (Debian testing watch)
[2018-07-06] Accepted systemd 232-25+deb9u4 (source) into proposed-updates->stable-new, proposed-updates (Michael Biebl)
[2018-07-05] Accepted systemd 239-5 (source) into unstable (Michael Biebl)
[2018-07-03] Accepted systemd 239-4 (source) into unstable (Michael Biebl)
[2018-06-27] Accepted systemd 239-3 (source) into unstable (Michael Biebl)
[2018-06-22] Accepted systemd 239-1 (source) into unstable (Michael Biebl)
[2018-05-31] systemd 238-5 MIGRATED to testing (Debian testing watch)
[2018-05-26] Accepted systemd 238-5 (source) into unstable (Michael Biebl)
[2018-04-06] systemd 238-4 MIGRATED to testing (Debian testing watch)
[2018-04-01] Accepted systemd 238-4 (source) into unstable (Michael Biebl)
[2018-03-27] Accepted systemd 232-25+deb9u3 (source) into proposed-updates->stable-new, proposed-updates (Michael Biebl)
[2018-03-26] systemd 238-3 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 180 196
RC: 0
I&N: 124 133
M&W: 53 60
F&P: 3
patch: 5
help: 12

links

homepage
lintian (0, 88)
buildd: logs, checks, clang, reproducibility
popcon
debci
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 239-7ubuntu10
596 bugs (14 patches)
patches for 239-7ubuntu10