Debian Package Tracker

general

source: systemd (main)
version: 241-3
maintainer: Debian systemd Maintainers (archive) [DMD]
uploaders: Martin Pitt [DMD] – Sjoerd Simons [DMD] – Michael Biebl [DMD] – Marco d'Itri [DMD] – Felipe Sateler [DMD]
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 215-17+deb8u7
old-sec: 215-17+deb8u11
stable: 232-25+deb9u8
stable-sec: 232-25+deb9u11
stable-bpo: 241-3~bpo9+1
stable-p-u: 232-25+deb9u11
testing: 241-3
unstable: 241-3

versioned links

215-17+deb8u7: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
215-17+deb8u11: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
232-25+deb9u8: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
232-25+deb9u11: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
241-3~bpo9+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
241-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libnss-myhostname
libnss-mymachines
libnss-resolve
libnss-systemd
libpam-systemd
libsystemd-dev
libsystemd0
libudev-dev
libudev1
libudev1-udeb
systemd
systemd-container
systemd-coredump
systemd-journal-remote
systemd-sysv
systemd-tests
udev
udev-udeb

action needed

A new upstream version is available: 242 high

A new upstream version 242 is available, you should consider packaging it.

Created: 2019-04-05 Last update: 2019-04-24 14:03

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-9619:

Please fix it.

Created: 2019-04-08 Last update: 2019-04-23 13:30

4 security issues in jessie high

There are 4 open security issues in jessie.

1 important issue:

CVE-2019-3842: In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".

3 issues skipped by the security teams:

CVE-2019-9619:
CVE-2018-16888: It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service file), a local attacker who is able to write to the PIDFile of the mentioned service may use this flaw to trick systemd into killing other services and/or privileged processes. Versions before v237 are vulnerable.
CVE-2018-6954: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.

Please fix them.

Created: 2018-01-17 Last update: 2019-04-23 13:30

lintian reports 4 errors and 52 warnings high

Lintian reports 4 errors and 52 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-04-09 Last update: 2019-04-09 06:41

Depends on packages which need a new maintainer normal

The packages that systemd depends on which need a new maintainer are:

docbook-xml (#802368)
- Build-Depends: docbook-xml
docbook-xsl (#802370)
- Build-Depends: docbook-xsl
lsb (#924519)
- Depends: lsb-base

Created: 2017-12-02 Last update: 2019-04-24 14:39

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-04-12 Last update: 2019-04-24 14:06

11 bugs tagged help in the BTS normal

The BTS contains 11 bugs tagged help, please consider helping the maintainer in dealing with them.

Created: 2019-03-21 Last update: 2019-04-24 13:35

4 bugs tagged patch in the BTS normal

The BTS contains patches fixing 4 bugs, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-04-24 13:35

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit d8e4bc4487b0f32b39b15152040351261329e92a
Author: Michael Biebl <biebl@debian.org>
Date:   Wed Apr 24 12:10:57 2019 +0200

    journal-remote: Do not request Content-Length if Transfer-Encoding is chunked
    
    Closes: #927008

commit 3b8093812487236908d9032b4fffeb2b45788526
Author: Martin Pitt <martin@piware.de>
Date:   Fri Apr 12 08:24:53 2019 +0200

    debian/extra/checkout-upstream: Support submodules
    
    See https://github.com/systemd/systemd/pull/12151

Created: 2019-04-12 Last update: 2019-04-24 13:00

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2019-9619:

Please fix it.

Created: 2019-04-08 Last update: 2019-04-23 13:30

3 ignored security issues in stretch low

There are 3 open security issues in stretch.

3 issues skipped by the security teams:

CVE-2019-9619:
CVE-2018-16888: It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service file), a local attacker who is able to write to the PIDFile of the mentioned service may use this flaw to trick systemd into killing other services and/or privileged processes. Versions before v237 are vulnerable.
CVE-2018-6954: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.

Please fix them.

Created: 2017-10-27 Last update: 2019-04-23 13:30

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2017-10-26 Last update: 2017-10-26 07:23

news

[rss feed]

[2019-04-14] Accepted systemd 232-25+deb9u11 (source) into proposed-updates->stable-new, proposed-updates (Michael Biebl)
[2019-04-13] Accepted systemd 241-3~bpo9+1 (source) into stretch-backports->backports-policy, stretch-backports (Michael Biebl)
[2019-04-11] systemd 241-3 MIGRATED to testing (Debian testing watch)
[2019-04-08] Accepted systemd 232-25+deb9u11 (source) into stable->embargoed, stable (Michael Biebl)
[2019-04-08] Accepted systemd 241-3 (source) into unstable (Michael Biebl)
[2019-04-04] Accepted systemd 232-25+deb9u10 (source) into proposed-updates->stable-new, proposed-updates (Michael Biebl)
[2019-03-15] Accepted systemd 241-2 (source) into unstable (Michael Biebl)
[2019-03-13] Accepted systemd 215-17+deb8u11 (source amd64) into oldstable (Markus Koschany)
[2019-03-06] Accepted systemd 241-1~bpo9+1 (source) into stretch-backports (Michael Biebl)
[2019-03-06] systemd 241-1 MIGRATED to testing (Debian testing watch)
[2019-02-21] Accepted systemd 241-1 (source) into unstable (Felipe Sateler)
[2019-02-21] systemd 240-6 MIGRATED to testing (Debian testing watch)
[2019-02-19] Accepted systemd 215-17+deb8u10 (source amd64) into oldstable (Emilio Pozuelo Monfort)
[2019-02-18] Accepted systemd 232-25+deb9u9 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-02-18] Accepted systemd 232-25+deb9u9 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-02-18] Accepted systemd 240-6 (source) into unstable (Martin Pitt)
[2019-02-06] systemd 240-5 MIGRATED to testing (Debian testing watch)
[2019-01-29] Accepted systemd 232-25+deb9u8 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-01-29] Accepted systemd 232-25+deb9u7 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-01-28] Accepted systemd 240-5 (source) into unstable (Martin Pitt)
[2019-01-23] Accepted systemd 215-17+deb8u9 (source amd64) into oldstable (Antoine Beaupré)
[2019-01-18] systemd 240-4 MIGRATED to testing (Debian testing watch)
[2019-01-15] Accepted systemd 232-25+deb9u8 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-01-13] Accepted systemd 232-25+deb9u7 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-01-12] Accepted systemd 240-4 (source) into unstable (Michael Biebl)
[2019-01-09] Accepted systemd 240-3 (source) into unstable (Michael Biebl)
[2019-01-01] systemd 240-2 MIGRATED to testing (Debian testing watch)
[2018-12-27] Accepted systemd 240-2 (source) into unstable (Michael Biebl)
[2018-12-22] Accepted systemd 240-1 (source) into unstable (Michael Biebl)
[2018-12-17] systemd 239-15 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 150 165
RC: 0
I&N: 100 110
M&W: 49 54
F&P: 1
patch: 4
help: 11

links

homepage
lintian (4, 52)
buildd: logs, checks, clang, reproducibility, cross
popcon
debci
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 240-6ubuntu5
677 bugs (13 patches)
patches for 240-6ubuntu5