Change logs for systemd source package in Eoan

  • systemd (243-1ubuntu1) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/t/control: mark udev test skippable.
        The udev test will return 77 (from udev-test.pl) if it can't
        setup the test environment; mark it skipped in that case.
        Author: Dan Streetman
        File: debian/tests/control
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3419bd2a30a78d05cca9c38e50c9726de7e7632
    
      [ Dimitri John Ledkov ]
      * debian/extra/wrap_cl.py: add changelog formatter
        Author: Dimitri John Ledkov
        Files:
        - debian/extra/wrap_cl.py
        - debian/gbp.conf
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3
    
      [ Balint Reczey ]
      * debian/test/boot-and-services: Skip AppArmor tests in arm containers.
        The test is failing on armhf testbeds using containers
        File: debian/tests/boot-and-services
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3
      * d/t/control: run udev tests only with isolation-machine.
        It fails in Ubuntu CI armhf containers and may fail elsewhere, too.
        File: debian/tests/control
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7
      * Merge to Ubuntu from unstable
        - Dropped changes:
          * Skip starting systemd-remount-fs.service in containers
            even when /etc/fstab is present.
            File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch
          * resolved: add support for pipelined requests
            Files:
            - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch
            - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch
            - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch
            - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch
            - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch
            - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch
            - debian/patches/stream-track-type-of-DnsStream-object.patch
            - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f
          * pam-systemd: use secure_getenv() rather than getenv()
            File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c
          * support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * tests/storage: make the test more resilient.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
          * Wait for cryptsetup unit to start, before stopping.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
          * Fix typpo in storage test.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
        - Remaining changes:
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Switch gbp.conf to disco.
            File: debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
          * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository
          * debian/gbp.conf: Set tag format to ubuntu/*
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Refresh patches
      * debian/tests/boot-smoke: Restore exit handling Ubuntu delta lost in 241 merge
        File: debian/tests/boot-smoke
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3bad1cf23cc91299471542e83c589f2b6237a162
      * debian/gbp.conf: set debian-branch to ubuntu-eoan
        File: debian/gbp.conf
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=39e6f84cd899a3af58a19040c5e7ae2d18c36a72
      * Merge to Ubuntu from experimental
      * Refresh patches:
        - Dropped changes:
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
        - Remaining changes:
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * debian/extra/units/systemd-resolved.service.d/resolvconf.conf:
            drop resolvconf.conf drop-in, resolved integration moved to resolvconf package.
          * debian/extra/wrap_cl.py: add changelog formatter
            Files:
            - debian/extra/wrap_cl.py
            - debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3
          * debian/gbp.conf: Set tag format to ubuntu/*
          * debian/gbp.conf: Change debian-branch to ubuntu-eoan
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
      * Refresh patches
      * Set the previous default, -Ddefault-hierarchy=hybrid at build-time.
        This prevents breaking container managers
        File: debian/rules
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7dbbd631f5c723b2e91f6db4a26b4bfa659ca4d0
      * Pick upstream fix for generated units always asking for daemon reload
        File: debian/patches/core-restore-initialization-of-u-source_mtime.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=08ec2c0062271b9691ced6c08088d0b7dd056b4e
      * Revert putting bin before sbin for user instances.
        This would break expectation on Debian, Ubuntu and other derivatives.
        File: debian/patches/Revert-manager-put-bin-before-sbin-for-user-instances.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=02a09226d2769adc52c77a0efca9744602e1e641
      * Skip falling back to device name when net_get_name(device) fails.
        This fixes network-manager and netplan.io autopkgtests.
        File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=21c0722def8c84e01b5021aae171af87f343709b
    
    systemd (243-1) experimental; urgency=medium
    
      * New upstream version 243
      * Merge changes from unstable branch
    
    systemd (243~rc2-1) experimental; urgency=medium
    
      * New upstream version 243~rc2
        - man: document that "systemd-analyze blame/critical-chain" is not useful
          to track down job latency. (Closes: #920234)
        - systemctl: process all units matched by a glob in the cat verb by
          default. (Closes: #904913)
        - units: automatically revert to /run logging on shutdown if necessary.
          Prevents /var staying busy on shutdown due to journald.
          (Closes: #851402)
        - bash-completion: don't sort syslog priorities. (Closes: #913222)
        - man: add example for setting multiple properties at once.
          (Closes: #807464)
      * Rebase patches
      * Update symbols file for libsystemd0
      * core: stop removing non-existent and duplicate lookup paths
      * Install static-nodes-permissions.conf tmpfile in udev
    
    systemd (242-7) unstable; urgency=medium
    
      * sleep: properly pass verb to sleep script
      * core: factor root_directory application out of apply_working_directory.
        Fixes RootDirectory not working when used in combination with User.
        (Closes: #939408)
      * shared/bus-util: drop trusted annotation from
        bus_open_system_watch_bind_with_description().
        This ensures that access controls on systemd-resolved's D-Bus interface
        are enforced properly.
        (CVE-2019-15718, Closes: #939353)
    
    systemd (242-6) unstable; urgency=medium
    
      [ Dan Streetman ]
      * d/t/control: upstream test requires qemu-system-ppc on ppc64el
      * d/t/control: install seabios for upstream test.
        Some archs (at least arm64) qemu implementation require the vga bios.
    
      [ Michael Biebl ]
      * Drop unused lintian override
      * network: fix ListenPort= in [WireGuard] section (Closes: #936198)
      * d/e/r/73-usb-net-by-mac.rules: import net.ifnames only for network devices
        (Closes: #934589)
      * d/e/r/73-usb-net-by-mac.rules: skip if iface name was provided by
        user-space
      * Drop dbus activation stub service.
        Since dbus 1.11.0, a dbus-daemon that is run with --systemd-activation
        automatically assumes that o.fd.systemd1 is an activatable service.
        As a result, with a new enough dbus version,
        /usr/share/dbus-1/services/org.freedesktop.systemd1.service and
        /usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
        become unnecessary and can be removed. (Closes: #914015)
      * Revert "core: check start limit on condition checks too"
        If a unit was referenced too often, it hit the restart limit and the
        unit was marked as failed. Fixes a regression introduced in v242.
        (Closes: #935829)
    
      [ Michael Prokop ]
      * README.Debian: document KillUserProcesses behavior in Debian
    
    systemd (242-5) unstable; urgency=medium
    
      [ Dan Streetman ]
      * d/rules: add CONFFGLAGS_UPSTREAM to dh_auto_configure -- params
    
      [ Michael Biebl ]
      * core: never propagate reload failure to service result.
        Fixes a regression introduced in v239 where the main process of a
        service unit gets killed on reload if ExecReload fails. (Closes: #936032)
      * shared/seccomp: add sync_file_range2.
        Some architectures need the arguments to be reordered because of alignment
        issues. Otherwise, it's the same as sync_file_range.
        Fixes sync_file_range failures in nspawn containers on arm, ppc.
        (Closes: #935091)
      * bash-completion: don't sort syslog priorities.
        By default, the available completions are sorted alphabetically, which
        is counterproductive in case of syslog priorities. Override the default
        behavior using the `nosort` option. (Closes: #913222)
      * test-bpf: skip test when run inside containers
    
    systemd (242-4) unstable; urgency=medium
    
      * Upload to unstable
    
    systemd (242-3) experimental; urgency=medium
    
      [ Dan Streetman ]
      * d/t/boot-and-services: fix test_failing()
      * d/t/boot-and-services: check for any kernel message, not just first kernel
        message (Closes: #929730)
      * d/t/upstream: add TEST-30, TEST-34 to blacklist
      * d/t/timedated: replace systemctl is-active with systemctl show
      * d/t/control: root-unittests can break networking, add breaks-testbed
      * d/t/control: mark udev test skippable
      * d/t/upstream: always cleanup after (and before) each test
      * d/t/control: upstream test requires dmeventd
      * d/e/checkout-upstream: don't remove .git
      * d/e/checkout-upstream: move change to debian/ files above other changes
      * d/e/checkout-upstream: add UPSTREAM_KEEP_CHANGELOG param
      * d/e/checkout-upstream: create git commits for each change
      * d/e/checkout-upstream: switch from 'quilt' to 'native' format
      * d/e/checkout-upstream: set user.name, user.email if unset
      * d/t/storage: change plaintext_name to include testname
      * d/t/storage: increase wait for plaintext_dev from 5 to 30 seconds
      * d/t/storage: wait for service to start, only stop if active
      * d/t/storage: don't search for 'scsi_debug' in ask_password
      * d/t/storage: manage scsi_debug using add_hosts (Closes: #929728)
      * d/t/storage: use short timeout waiting for scsi_debug block dev to appear
      * d/t/storage: convert password agent into normal Thread
      * d/t/storage: fail if socket info not in ask_password contents
      * d/t/boot-smoke: pass failure reason to fail() to print instead of separate
        echo
      * d/t/boot-smoke: in fail() set +e so errors are ignored while gathering
        data
      * d/t/boot-smoke: gather still running jobs in fail()
      * d/t/boot-smoke: wait for is-system-running
      * d/t/boot-smoke: call fail if pidof polkitd fails
      * d/t/boot-smoke: remove check for running jobs
    
      [ Michael Biebl ]
      * d/t/boot-smoke: check for NetworkManager instead of D-Bus activated
        polkitd (Closes: #934992)
    
    systemd (242-2) experimental; urgency=medium
    
      [ Michael Biebl ]
      * Drop dependency on lsb-base.
        It is only needed when booting with sysvinit and initscripts, but
        initscripts already Depends on lsb-base (see #864999).
      * Stop removing enablement symlinks in /etc/systemd/system.
        With v242 this is no longer necessary as `ninja install` will no longer
        create those symlinks.
      * Replace manual removal of halt-local.service with upstream patch
    
      [ Dimitri John Ledkov ]
      * Build manpages in .deb variant.
        Upstream snapshots are switching to building manpages off by default.
    
      [ Luca Boccassi ]
      * Enable portabled and install related files in systemd-container.
        Keep disabled for the udeb profile. (Closes: #918606)
    
    systemd (242-1) experimental; urgency=medium
    
      * New upstream version 242
        - Change ownership/mode of the execution directories also for static users
          (Closes: #919231)
        - A new boolean sandboxing option RestrictSUIDSGID= has been added that is
          built on seccomp. When turned on, creation of SUID/SGID files is
          prohibited. The NoNewPrivileges= and the new RestrictSUIDSGID= options
          are now implied if DynamicUser= is turned on for a service.
          (Closes: #928102, CVE-2019-3843, CVE-2019-3844)
      * Drop Revert-udev-network-device-renaming-immediately-give.patch.
        This patch needs ongoing maintenance work to be adapted to new releases
        and fails to apply with v242. Instead of investing more time into it we
        are going to drop the patch as it was a hack anyway.
      * Rebase patches
      * Drop pre-stretch migration code
      * Drop /sbin/udevadm compat symlink (Closes: #852580)
      * socket-util: Make sure flush_accept() doesn't hang on unexpected
        EOPNOTSUPP
      * Enable regexp matching support in journalctl using pcre2 (Closes: #898892)
      * Switch from libidn to libidn2 (Closes: #928615)
    
     -- Balint Reczey <email address hidden>  Fri, 20 Sep 2019 15:15:17 +0200
  • systemd (243~rc1-0ubuntu2) eoan; urgency=medium
    
      * Revert unit cache rework to fix regressions
        Files:
        - d/p/Revert-analyze-add-unit-files-to-dump-the-unit-fragment-m.patch
        - d/p/Revert-pid1-drop-unit-caches-only-based-on-mtime.patch
        - d/p/Revert-pid1-use-a-cache-for-all-unit-aliases.patch
        - d/p/Revert-test-unit-file-allow-printing-of-information-about.patch
      * Set the previous default, -Ddefault-hierarchy=hybrid at build-time.
        This prevents breaking container managers
    
    systemd (243~rc1-0ubuntu1) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/t/boot-and-services: fix test_failing() (LP: #1831296)
      * d/t/boot-and-services: check for any kernel message, not just first kernel
        message (LP: #1830479, Closes: #929730)
      * d/t/upstream: add TEST-30, TEST-34 to blacklist
      * d/t/timedated: replace systemctl is-active with systemctl show
      * d/t/control: root-unittests can break networking, add breaks-testbed
      * d/t/control: mark udev test skippable
      * d/t/upstream: always cleanup after (and before) each test
      * d/t/control: upstream test requires dmeventd.
      * d/e/checkout-upstream: don't remove .git
      * d/e/checkout-upstream: move change to debian/ files above other changes
      * d/e/checkout-upstream: add UPSTREAM_KEEP_CHANGELOG param
      * d/e/checkout-upstream: create git commits for each change
      * d/e/checkout-upstream: switch from 'quilt' to 'native' format
      * d/e/checkout-upstream: set user.name, user.email if unset
    
      [ Balint Reczey ]
      * New upstream version 243~rc1
      * Refresh patches:
        - Dropped changes:
          * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch:
            - Set src address for dhcp 'classless' routes (LP: #1835581)
          * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch:
            Allows cache=no-negative option to be set, ignoring negative
            answers to be cached (LP: #1668771).
            * Fix networking with Linux 5.2
              Files:
              - debian/patches/network-do-not-send-ipv6-token-to-kernel.patch
              - debian/patches/networkd-fix-link_up-12505.patch
              https://github.com/systemd/systemd/commit/4eb086a38712ea98faf41e075b84555b11b54362
              https://github.com/systemd/systemd/commit/9f6e82e6eb3b6e73d66d00d1d6eee60691fb702f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Merge changes from Debian Salsa's experimental branch
      * analyze: declare dump_exit_status outside of HAVE_SECCOMP block
        This fixes the udeb build.
      * Update symbols
    
    systemd (242-2ubuntu2) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch:
        - Set src address for dhcp 'classless' routes (LP: #1835581)
    
      [ Jorge Niedbalski ]
      * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch:
        Allows cache=no-negative option to be set, ignoring negative
        answers to be cached (LP: #1668771).
    
    systemd (242-2ubuntu1) eoan; urgency=medium
    
      * Merge to Ubuntu from experimental
        - Dropped changes:
          * Skip starting systemd-remount-fs.service in containers
            even when /etc/fstab is present.
            File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch
          * debian/tests: Switch to gdm
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Cherrypick proposed patch to fix LinkLocalAddressing post-unify-MTU settings.
            File: debian/patches/networkd-honour-LinkLocalAddressing.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cd9ba0d0f47634c9e5d862b8208cdc3178f25496
          * Import patches to support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            - debian/patches/test-test-functions-on-PP64-use-vmlinux.patch
            - debian/patches/test-test-functions-on-PPC64-use-hvc0-console.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * resolved: add support for pipelined requests
            Files:
            - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch
            - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch
            - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch
            - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch
            - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch
            - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch
            - debian/patches/stream-track-type-of-DnsStream-object.patch
            - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/Install-routes-after-addresses-are-ready.patch
            - debian/patches/Move-link_check_ready-to-later-in-the-file.patch
            - debian/patches/tests-Add-test-for-IPv6-source-routing.patch
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * udevadm: Fix segfault with subsystem-match containing '/' (Closes: #919206)
            File: debian/patches/udevadm-fix-segfault.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=736973d38676301f276716f22a746aed2489baac
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Fix comment about why we disable hwclock.service.
            File: debian/systemd.links
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8473f88fffdb9db1f5ba547bb692a911997f2569
          * debian/tests/storage: fix for LUKS2 and avoid interactive password prompts.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594ebf325816e76a8c58043c56fc94f2d52b2a6
          * d/p/network-remove-routing-policy-rule-from-foreign-rule.patch
          * d/p/network-do-not-remove-rule-when-it-is-requested-by-e.patch
            - Fix RoutingPolicyRule does not apply correctly
          * virt: detect WSL environment as a container
          * pam-systemd: use secure_getenv() rather than getenv()
            File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c
          * core: queue jobs on uninstall to generate PropertiesChanged signal.
            File: debian/patches/core-when-we-uninstall-a-job-add-unit-to-dbus-queue.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=241deca98fb9a0f1ba9a6ba781f738fb31a3bd80
          * systemd-stable: cherrypick many bugfixes from the v240-stable branch.
            Files:
            - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch
            - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch
            - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch
            - debian/patches/Fix-omission-in-docs.patch
            - debian/patches/Log-the-job-being-merged.patch
            - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch
            - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch
            - debian/patches/Update-systemd-system.conf.xml.patch
            - debian/patches/basic-prioq-add-prioq_peek_item.patch
            - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch
            - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch
            - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch
            - debian/patches/core-mount-move-static-function-earlier-in-file.patch
            - debian/patches/curl-util-fix-use-after-free.patch
            - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch
            - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch
            - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch
            - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch
            - debian/patches/machinectl-fix-argument-index-in-error-log.patch
            - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch
            - debian/patches/man-fix-reference.patch
            - debian/patches/man-fix-volume-num-of-journalctl.patch
            - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch
            - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch
            - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch
            - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch
            - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch
            - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch
            - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch
            - debian/patches/pager-improve-english-a-bit.patch
            - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch
            - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch
            - debian/patches/pull-fix-invalid-error-check.patch
            - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch
            - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch
            - debian/patches/test-execute-unset-HOME-before-testing.patch
            - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch
            - debian/patches/udev-val-may-be-NULL-use-strempty.patch
            - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch
            - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch
            - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch
            - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724
          * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints.
            Files:
            - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch
            - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch
            - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch
            - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11
          * Cherry-pick patches to fix FTBFS with GCC 9:
            - d/p/strv-rework-FOREACH_STRING-macro.patch
            - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
        - Remaining changes:
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Switch gbp.conf to disco.
            File: debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
          * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository
          * debian/gbp.conf: Set tag format to ubuntu/*
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * tests/storage: make the test more resilient.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * Wait for cryptsetup unit to start, before stopping.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * Fix typpo in storage test.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Refresh patches
      * debian/gbp.conf: Change debian-branch to ubuntu-eoan
      * Fix networking with Linux 5.2
        Files:
        - debian/patches/network-do-not-send-ipv6-token-to-kernel.patch
        - debian/patches/networkd-fix-link_up-12505.patch
        https://github.com/systemd/systemd/commit/4eb086a38712ea98faf41e075b84555b11b54362
        https://github.com/systemd/systemd/commit/9f6e82e6eb3b6e73d66d00d1d6eee60691fb702f
    
    systemd (242-2) experimental; urgency=medium
    
      [ Michael Biebl ]
      * Drop dependency on lsb-base.
        It is only needed when booting with sysvinit and initscripts, but
        initscripts already Depends on lsb-base (see #864999).
      * Stop removing enablement symlinks in /etc/systemd/system.
        With v242 this is no longer necessary as `ninja install` will no longer
        create those symlinks.
      * Replace manual removal of halt-local.service with upstream patch
    
      [ Dimitri John Ledkov ]
      * Build manpages in .deb variant.
        Upstream snapshots are switching to building manpages off by default.
    
      [ Luca Boccassi ]
      * Enable portabled and install related files in systemd-container.
        Keep disabled for the udeb profile. (Closes: #918606)
    
    systemd (242-1) experimental; urgency=medium
    
      * New upstream version 242
        - Change ownership/mode of the execution directories also for static users
          (Closes: #919231)
        - A new boolean sandboxing option RestrictSUIDSGID= has been added that is
          built on seccomp. When turned on, creation of SUID/SGID files is
          prohibited. The NoNewPrivileges= and the new RestrictSUIDSGID= options
          are now implied if DynamicUser= is turned on for a service.
          (Closes: #928102, CVE-2019-3843, CVE-2019-3844)
      * Drop Revert-udev-network-device-renaming-immediately-give.patch.
        This patch needs ongoing maintenance work to be adapted to new releases
        and fails to apply with v242. Instead of investing more time into it we
        are going to drop the patch as it was a hack anyway.
      * Rebase patches
      * Drop pre-stretch migration code
      * Drop /sbin/udevadm compat symlink (Closes: #852580)
      * socket-util: Make sure flush_accept() doesn't hang on unexpected
        EOPNOTSUPP
      * Enable regexp matching support in journalctl using pcre2 (Closes: #898892)
      * Switch from libidn to libidn2 (Closes: #928615)
    
    systemd (241-3) unstable; urgency=high
    
      [ Michael Biebl ]
      * Drop systemd-shim alternative from libpam-systemd.
        A fixed systemd-shim package which works with newer versions of systemd
        is unlikely to happen given that the systemd-shim package has been
        removed from the archive. Drop the alternative dependency from
        libpam-systemd accordingly.
      * Properly remove duplicate directories from systemd package.
        When removing duplicate directories from the systemd package, sort the
        list of directories in reverse order so we properly delete nested
        directories.
      * udev: Run programs in the specified order (Closes: #925190)
      * bash-completion: Use default completion for redirect operators
        (Closes: #924541)
      * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's
        (Closes: #815582)
      * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf"
        Apparently Conflicts= are not a reliable mechanism to ensure alternative
        NTP implementations take precedence over systemd-timesyncd.
        (Closes: #902026)
      * network: Fix routing policy rule issue.
        When multiple links request a routing policy, make sure they are all
        applied correctly. (Closes: #924406)
      * pam-systemd: Use secure_getenv() rather than getenv()
        Fixes a vulnerability in the systemd PAM module which insecurely uses
        the environment and lacks seat verification permitting spoofing an
        active session to PolicyKit. (CVE-2019-3842)
    
      [ Martin Pitt ]
      * Enable udev autopkgtest in containers.
        This test doesn't actually need udev.service (which is disabled in
        containers) and works fine in LXC.
      * Enable boot-and-service autopkgtest in containers
        - Skip tests which can't work in containers.
        - Add missing rsyslog test dependency.
        - e2scrub_reap.service fails in containers, ignore (filed as #926138)
        - Relax pgrep pattern for gdm, as there's no wayland session in
          containers.
    
    systemd (241-2) unstable; urgency=medium
    
      [ Martin Pitt ]
      * debian/tests/boot-smoke: Create journal and udevdb artifacts on all
        failures
      * autopkgtests: Replace obsolete $ADT_* variables
      * networkd-test: Ignore failures of test_route_only_dns* in containers.
        This test exposes a race condition when running in LXC, see issue #11848
        for details. Until that is understood and fixed, skip the test as it's
        not a recent regression. (Closes: #924539)
      * Bump Standards-Version to 4.3.0.
        No changes necessary.
      * debian/tests/boot-smoke: Only check current boot for connection timeouts.
        Otherwise we'll catch some
            Failed to resolve group 'render': Connection timed out
        messages that happen in earlier boots during VM setup, before the
        "render" group is created.
        Fixes https://github.com/systemd/systemd/issues/11875
      * timedated: Fix emitted value when ntp client is enabled/disabled.
        Fixes a regression introduced in 241.
      * debian/tests/timedated: Check enabling/disabling NTP.
        Assert that `timedatectl set-ntp` correctly controls the service, sets
        the `org.freedesktop.timedate1 NTP` property, and sends the right
        `PropertiesChanged` signal.
        This reproduces <https://github.com/systemd/systemd/issues/11944> and
        also the earlier <https://github.com/systemd/systemd/issues/9672>.
    
      [ Michael Biebl ]
      * Disable fallback DNS servers in resolved (Closes: #923081)
      * cgtop: Fix processing of controllers other than CPU (Closes: #921280)
      * udev: Restore debug level when logging a failure in the external prog
        called by IMPORT{program} (Closes: #924199)
      * core: Remove "." path components from required mount paths.
        Fixes mount related failures when a user's home directory contains "/./"
        (Closes: #923881)
      * udev.init: Use new s-s-d --notify-await to start udev daemon.
        Fixes a race condition during startup under SysV init.
        Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version
        of start-stop-daemon which supports --notify-await is installed.
        (Closes: #908796)
      * Make /dev/dri/renderD* accessible to group "render"
        Follow upstream and make render nodes available to a dedicated system
        group "render" instead of "video". Keep the uaccess tag for local,
        active users.
    
    systemd (241-1) unstable; urgency=medium
    
      [ Adam Borowski ]
      * Make libpam-systemd Provide: logind, default-logind.
        This allows alternate logind implementations such as elogind, without
        having to recompile every dependent package -- as long as the client API
        remains compatible.
        These new virtual packages got policy-approved in #917431. (Closes: #915407)
    
      [ Felipe Sateler ]
      * New upstream version 241
        - Refresh patches
        - Backport upstream fix for Driver= matches in .network files
    
      [ Martin Pitt ]
      * debian/libsystemd0.symbols: Add new symbol from release 241
      * Fix various bugs and races in networkd tests.
        This should get the autopkgtest back to green, which regressed with
        dnsmasq 2.80.
    
     -- Balint Reczey <email address hidden>  Thu, 08 Aug 2019 22:34:41 +0200
  • systemd (243~rc1-0ubuntu1) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/t/boot-and-services: fix test_failing() (LP: #1831296)
      * d/t/boot-and-services: check for any kernel message, not just first kernel
        message (LP: #1830479, Closes: #929730)
      * d/t/upstream: add TEST-30, TEST-34 to blacklist
      * d/t/timedated: replace systemctl is-active with systemctl show
      * d/t/control: root-unittests can break networking, add breaks-testbed
      * d/t/control: mark udev test skippable
      * d/t/upstream: always cleanup after (and before) each test
      * d/t/control: upstream test requires dmeventd.
      * d/e/checkout-upstream: don't remove .git
      * d/e/checkout-upstream: move change to debian/ files above other changes
      * d/e/checkout-upstream: add UPSTREAM_KEEP_CHANGELOG param
      * d/e/checkout-upstream: create git commits for each change
      * d/e/checkout-upstream: switch from 'quilt' to 'native' format
      * d/e/checkout-upstream: set user.name, user.email if unset
    
      [ Balint Reczey ]
      * New upstream version 243~rc1
      * Refresh patches:
        - Dropped changes:
          * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch:
            - Set src address for dhcp 'classless' routes (LP: #1835581)
          * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch:
            Allows cache=no-negative option to be set, ignoring negative
            answers to be cached (LP: #1668771).
            * Fix networking with Linux 5.2
              Files:
              - debian/patches/network-do-not-send-ipv6-token-to-kernel.patch
              - debian/patches/networkd-fix-link_up-12505.patch
              https://github.com/systemd/systemd/commit/4eb086a38712ea98faf41e075b84555b11b54362
              https://github.com/systemd/systemd/commit/9f6e82e6eb3b6e73d66d00d1d6eee60691fb702f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Merge changes from Debian Salsa's experimental branch
      * analyze: declare dump_exit_status outside of HAVE_SECCOMP block
        This fixes the udeb build.
      * Update symbols
    
    systemd (242-2ubuntu2) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch:
        - Set src address for dhcp 'classless' routes (LP: #1835581)
    
      [ Jorge Niedbalski ]
      * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch:
        Allows cache=no-negative option to be set, ignoring negative
        answers to be cached (LP: #1668771).
    
    systemd (242-2ubuntu1) eoan; urgency=medium
    
      * Merge to Ubuntu from experimental
        - Dropped changes:
          * Skip starting systemd-remount-fs.service in containers
            even when /etc/fstab is present.
            File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch
          * debian/tests: Switch to gdm
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Cherrypick proposed patch to fix LinkLocalAddressing post-unify-MTU settings.
            File: debian/patches/networkd-honour-LinkLocalAddressing.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cd9ba0d0f47634c9e5d862b8208cdc3178f25496
          * Import patches to support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            - debian/patches/test-test-functions-on-PP64-use-vmlinux.patch
            - debian/patches/test-test-functions-on-PPC64-use-hvc0-console.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * resolved: add support for pipelined requests
            Files:
            - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch
            - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch
            - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch
            - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch
            - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch
            - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch
            - debian/patches/stream-track-type-of-DnsStream-object.patch
            - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/Install-routes-after-addresses-are-ready.patch
            - debian/patches/Move-link_check_ready-to-later-in-the-file.patch
            - debian/patches/tests-Add-test-for-IPv6-source-routing.patch
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * udevadm: Fix segfault with subsystem-match containing '/' (Closes: #919206)
            File: debian/patches/udevadm-fix-segfault.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=736973d38676301f276716f22a746aed2489baac
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Fix comment about why we disable hwclock.service.
            File: debian/systemd.links
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8473f88fffdb9db1f5ba547bb692a911997f2569
          * debian/tests/storage: fix for LUKS2 and avoid interactive password prompts.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594ebf325816e76a8c58043c56fc94f2d52b2a6
          * d/p/network-remove-routing-policy-rule-from-foreign-rule.patch
          * d/p/network-do-not-remove-rule-when-it-is-requested-by-e.patch
            - Fix RoutingPolicyRule does not apply correctly
          * virt: detect WSL environment as a container
          * pam-systemd: use secure_getenv() rather than getenv()
            File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c
          * core: queue jobs on uninstall to generate PropertiesChanged signal.
            File: debian/patches/core-when-we-uninstall-a-job-add-unit-to-dbus-queue.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=241deca98fb9a0f1ba9a6ba781f738fb31a3bd80
          * systemd-stable: cherrypick many bugfixes from the v240-stable branch.
            Files:
            - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch
            - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch
            - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch
            - debian/patches/Fix-omission-in-docs.patch
            - debian/patches/Log-the-job-being-merged.patch
            - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch
            - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch
            - debian/patches/Update-systemd-system.conf.xml.patch
            - debian/patches/basic-prioq-add-prioq_peek_item.patch
            - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch
            - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch
            - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch
            - debian/patches/core-mount-move-static-function-earlier-in-file.patch
            - debian/patches/curl-util-fix-use-after-free.patch
            - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch
            - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch
            - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch
            - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch
            - debian/patches/machinectl-fix-argument-index-in-error-log.patch
            - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch
            - debian/patches/man-fix-reference.patch
            - debian/patches/man-fix-volume-num-of-journalctl.patch
            - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch
            - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch
            - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch
            - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch
            - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch
            - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch
            - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch
            - debian/patches/pager-improve-english-a-bit.patch
            - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch
            - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch
            - debian/patches/pull-fix-invalid-error-check.patch
            - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch
            - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch
            - debian/patches/test-execute-unset-HOME-before-testing.patch
            - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch
            - debian/patches/udev-val-may-be-NULL-use-strempty.patch
            - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch
            - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch
            - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch
            - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724
          * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints.
            Files:
            - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch
            - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch
            - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch
            - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11
          * Cherry-pick patches to fix FTBFS with GCC 9:
            - d/p/strv-rework-FOREACH_STRING-macro.patch
            - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
        - Remaining changes:
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Switch gbp.conf to disco.
            File: debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
          * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository
          * debian/gbp.conf: Set tag format to ubuntu/*
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * tests/storage: make the test more resilient.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * Wait for cryptsetup unit to start, before stopping.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * Fix typpo in storage test.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Refresh patches
      * debian/gbp.conf: Change debian-branch to ubuntu-eoan
      * Fix networking with Linux 5.2
        Files:
        - debian/patches/network-do-not-send-ipv6-token-to-kernel.patch
        - debian/patches/networkd-fix-link_up-12505.patch
        https://github.com/systemd/systemd/commit/4eb086a38712ea98faf41e075b84555b11b54362
        https://github.com/systemd/systemd/commit/9f6e82e6eb3b6e73d66d00d1d6eee60691fb702f
    
    systemd (242-2) experimental; urgency=medium
    
      [ Michael Biebl ]
      * Drop dependency on lsb-base.
        It is only needed when booting with sysvinit and initscripts, but
        initscripts already Depends on lsb-base (see #864999).
      * Stop removing enablement symlinks in /etc/systemd/system.
        With v242 this is no longer necessary as `ninja install` will no longer
        create those symlinks.
      * Replace manual removal of halt-local.service with upstream patch
    
      [ Dimitri John Ledkov ]
      * Build manpages in .deb variant.
        Upstream snapshots are switching to building manpages off by default.
    
      [ Luca Boccassi ]
      * Enable portabled and install related files in systemd-container.
        Keep disabled for the udeb profile. (Closes: #918606)
    
    systemd (242-1) experimental; urgency=medium
    
      * New upstream version 242
        - Change ownership/mode of the execution directories also for static users
          (Closes: #919231)
        - A new boolean sandboxing option RestrictSUIDSGID= has been added that is
          built on seccomp. When turned on, creation of SUID/SGID files is
          prohibited. The NoNewPrivileges= and the new RestrictSUIDSGID= options
          are now implied if DynamicUser= is turned on for a service.
          (Closes: #928102, CVE-2019-3843, CVE-2019-3844)
      * Drop Revert-udev-network-device-renaming-immediately-give.patch.
        This patch needs ongoing maintenance work to be adapted to new releases
        and fails to apply with v242. Instead of investing more time into it we
        are going to drop the patch as it was a hack anyway.
      * Rebase patches
      * Drop pre-stretch migration code
      * Drop /sbin/udevadm compat symlink (Closes: #852580)
      * socket-util: Make sure flush_accept() doesn't hang on unexpected
        EOPNOTSUPP
      * Enable regexp matching support in journalctl using pcre2 (Closes: #898892)
      * Switch from libidn to libidn2 (Closes: #928615)
    
    systemd (241-3) unstable; urgency=high
    
      [ Michael Biebl ]
      * Drop systemd-shim alternative from libpam-systemd.
        A fixed systemd-shim package which works with newer versions of systemd
        is unlikely to happen given that the systemd-shim package has been
        removed from the archive. Drop the alternative dependency from
        libpam-systemd accordingly.
      * Properly remove duplicate directories from systemd package.
        When removing duplicate directories from the systemd package, sort the
        list of directories in reverse order so we properly delete nested
        directories.
      * udev: Run programs in the specified order (Closes: #925190)
      * bash-completion: Use default completion for redirect operators
        (Closes: #924541)
      * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's
        (Closes: #815582)
      * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf"
        Apparently Conflicts= are not a reliable mechanism to ensure alternative
        NTP implementations take precedence over systemd-timesyncd.
        (Closes: #902026)
      * network: Fix routing policy rule issue.
        When multiple links request a routing policy, make sure they are all
        applied correctly. (Closes: #924406)
      * pam-systemd: Use secure_getenv() rather than getenv()
        Fixes a vulnerability in the systemd PAM module which insecurely uses
        the environment and lacks seat verification permitting spoofing an
        active session to PolicyKit. (CVE-2019-3842)
    
      [ Martin Pitt ]
      * Enable udev autopkgtest in containers.
        This test doesn't actually need udev.service (which is disabled in
        containers) and works fine in LXC.
      * Enable boot-and-service autopkgtest in containers
        - Skip tests which can't work in containers.
        - Add missing rsyslog test dependency.
        - e2scrub_reap.service fails in containers, ignore (filed as #926138)
        - Relax pgrep pattern for gdm, as there's no wayland session in
          containers.
    
    systemd (241-2) unstable; urgency=medium
    
      [ Martin Pitt ]
      * debian/tests/boot-smoke: Create journal and udevdb artifacts on all
        failures
      * autopkgtests: Replace obsolete $ADT_* variables
      * networkd-test: Ignore failures of test_route_only_dns* in containers.
        This test exposes a race condition when running in LXC, see issue #11848
        for details. Until that is understood and fixed, skip the test as it's
        not a recent regression. (Closes: #924539)
      * Bump Standards-Version to 4.3.0.
        No changes necessary.
      * debian/tests/boot-smoke: Only check current boot for connection timeouts.
        Otherwise we'll catch some
            Failed to resolve group 'render': Connection timed out
        messages that happen in earlier boots during VM setup, before the
        "render" group is created.
        Fixes https://github.com/systemd/systemd/issues/11875
      * timedated: Fix emitted value when ntp client is enabled/disabled.
        Fixes a regression introduced in 241.
      * debian/tests/timedated: Check enabling/disabling NTP.
        Assert that `timedatectl set-ntp` correctly controls the service, sets
        the `org.freedesktop.timedate1 NTP` property, and sends the right
        `PropertiesChanged` signal.
        This reproduces <https://github.com/systemd/systemd/issues/11944> and
        also the earlier <https://github.com/systemd/systemd/issues/9672>.
    
      [ Michael Biebl ]
      * Disable fallback DNS servers in resolved (Closes: #923081)
      * cgtop: Fix processing of controllers other than CPU (Closes: #921280)
      * udev: Restore debug level when logging a failure in the external prog
        called by IMPORT{program} (Closes: #924199)
      * core: Remove "." path components from required mount paths.
        Fixes mount related failures when a user's home directory contains "/./"
        (Closes: #923881)
      * udev.init: Use new s-s-d --notify-await to start udev daemon.
        Fixes a race condition during startup under SysV init.
        Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version
        of start-stop-daemon which supports --notify-await is installed.
        (Closes: #908796)
      * Make /dev/dri/renderD* accessible to group "render"
        Follow upstream and make render nodes available to a dedicated system
        group "render" instead of "video". Keep the uaccess tag for local,
        active users.
    
    systemd (241-1) unstable; urgency=medium
    
      [ Adam Borowski ]
      * Make libpam-systemd Provide: logind, default-logind.
        This allows alternate logind implementations such as elogind, without
        having to recompile every dependent package -- as long as the client API
        remains compatible.
        These new virtual packages got policy-approved in #917431. (Closes: #915407)
    
      [ Felipe Sateler ]
      * New upstream version 241
        - Refresh patches
        - Backport upstream fix for Driver= matches in .network files
    
      [ Martin Pitt ]
      * debian/libsystemd0.symbols: Add new symbol from release 241
      * Fix various bugs and races in networkd tests.
        This should get the autopkgtest back to green, which regressed with
        dnsmasq 2.80.
    
    systemd (240-6ubuntu10) eoan; urgency=medium
    
      [ Jeremy Soller ]
      * random-util: eat up bad RDRAND values seen on AMD CPUs.
        This fixes AMD Ryzen 3000 series failing to boot (LP: #1835809)
    
      [ Balint Reczey]
      * Cherry-pick patches to fix FTBFS with GCC 9:
        - d/p/strv-rework-FOREACH_STRING-macro.patch
        - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
    
     -- Balint Reczey <email address hidden>  Sat, 03 Aug 2019 22:01:14 +0200
  • systemd (242-7ubuntu3.11) eoan; urgency=medium
    
      * fix arm64 ftbfs with libseccomp 2.4.3 (LP: #1876055)
        - d/p/fix-arm64-ftbfs-after-seccomp-upgrade.patch: backport from upstream
    
    systemd (242-7ubuntu3.10) eoan; urgency=medium
    
      * fix issues with muliplexed shmat calls and libseccomp 2.4.3 (LP: #1876055)
        - d/p/lp-1853852-*: add backports based on the patches from LP #1853852
    
     -- Alex Murray <email address hidden>  Mon, 15 Jun 2020 12:12:40 +0930
  • systemd (242-7ubuntu3.9) eoan; urgency=medium
    
      * d/p/lp1867375/0001-network-Allow-to-configure-GW-even-UseRoutes-false.patch,
        d/p/lp1867375/0002-network-add-a-flag-to-ignore-gateway-provided-by-DHC.patch,
        d/p/lp1867375/0003-network-change-UseGateway-default-to-UseRoutes-setti.patch,
        d/p/lp1867375/0004-network-honor-SetDNSRoutes-even-if-UseGateway-False.patch:
        - Move gateway ignoring from UseRoutes= to UseGateway= (LP: #1867375)
       * d/p/lp1873607/0001-core-some-minor-clean-ups-modernizations.patch,
         d/p/lp1873607/0002-core-make-sure-to-restore-the-control-command-id-too.patch:
         - Avoid segfault during serialization (LP: #1873607)
       * d/p/lp1877271-network-drop-all-checks-of-ipv6_disabled-sysctl.patch:
         - enable ipv6 for interface when needed (LP: #1877271)
       * d/p/lp1860926-network-Change-IgnoreCarrierLoss-default-to-value-of.patch:
         - IgnoreCarrierLoss default to ConfigureWithoutCarrier (LP: #1860926)
    
     -- Dan Streetman <email address hidden>  Fri, 08 May 2020 12:28:53 -0400
  • systemd (242-7ubuntu3.8) eoan; urgency=medium
    
      * d/t/logind: skip if nonexistent /sys/power/state (LP: #1862657)
      * d/p/lp1859862-network-Do-not-disable-IPv6-by-writing-to-sysctl.patch:
        - enable ipv6 when needed (LP: #1859862)
      * d/p/lp1858412-journalctl-allow-running-vacuum-on-remote-journals-t.patch:
        - allow vacuuming journal 'root' dir (LP: #1858412)
      * d/rules: use meson --print-errorlogs instead of cat testlog
        - (LP: #1870811)
      * d/p/lp1776654-test-Synchronize-journal-before-reading-from-it.patch:
        - sync journal before reading from it (LP: #1776654)
      * d/p/lp1837914-journal-do-not-trigger-assertion-when-journal_file_c.patch:
        - do not crash if NULL passted to journal destructor (LP: #1837914)
      * d/e/initramfs-tools/hooks/udev:
        - Follow symlinks when finding link files to copy into initramfs
          (LP: #1868892)
    
     -- Dan Streetman <email address hidden>  Mon, 20 Apr 2020 09:44:51 -0400
  • systemd (242-7ubuntu3.7) eoan; urgency=medium
    
      [ Dariusz Gadomski ]
      * d/p/lp1762391/0001-Call-getgroups-to-know-size-of-supplementary-groups-.patch,
        d/p/lp1762391/0002-user-util-tweak-to-in_gid.patch,
        d/p/lp1762391/0003-user-util-Add-helper-functions-for-gid-lists-operati.patch,
        d/p/lp1762391/0004-execute-Restore-call-to-pam_setcred.patch,
        d/p/lp1762391/0005-execute-Detect-groups-added-by-PAM-and-merge-them-wi.patch,
        d/p/lp1762391/0006-test-Add-tests-for-gid-list-ops.patch,
        d/p/lp1762391/0007-execute-add-const-to-array-parameters-where-possible.patch,
        d/p/lp1762391/0008-execute-allow-pam_setcred-to-fail-ignore-errors.patch:
        - Restore call to pam_setcred (LP: #1762391)
    
      * d/p/lp1846232/0001-network-honor-MTUBytes-setting.patch,
        d/p/lp1846232/0002-network-bump-MTU-bytes-only-when-MTUByte-is-not-set.patch:
        - do not always bump MTU with additional 4bytes (LP: #1846232)
      * d/p/lp1671951-network-set-ipv6-mtu-after-link-up-or-device-mtu-cha.patch:
        - set ipv6 mtu at correct time (LP: #1671951)
      * d/p/lp1845909/0001-network-rename-linux_configure_after_setting_mtu-to-linux.patch,
        d/p/lp1845909/0002-network-add-link-setting_genmode-flag.patch,
        d/p/lp1845909/0003-network-if-ipv6ll-is-disabled-enumerate-tentative-ipv6-ad.patch,
        d/p/lp1845909/0004-network-drop-foreign-config-after-addr_gen_mode-has-been-.patch,
        d/p/lp1845909/0005-network-drop-IPv6LL-address-when-LinkLocalAddressing.patch:
        - drop foreign config and raise interface after setting genmode
          (LP: #1845909)
      * d/t/storage: without scsi_debug, skip test (LP: #1847816)
    
     -- Dan Streetman <email address hidden>  Thu, 06 Feb 2020 09:45:57 -0500
  • systemd (242-7ubuntu3.6) eoan-security; urgency=medium
    
      * SECURITY UPDATE: memory leak in button_open
        - debian/patches/CVE-2019-20386.patch: fix event in
          src/login/logind-button.c.
        - CVE-2019-20386
      * SECURITY UPDATE: heap use-after-free with async polkit queries
        - debian/patches/CVE-2020-1712-1.patch: on async pk requests,
          re-validate action/details in src/shared/bus-util.c.
        - debian/patches/CVE-2020-1712-2.patch: introduce API for re-enqueuing
          incoming messages in src/libsystemd/libsystemd.sym,
          src/libsystemd/sd-bus/sd-bus.c, src/systemd/sd-bus.h.
        - debian/patches/CVE-2020-1712-3.patch: when authorizing via PK
          re-resolve callback/userdata instead of caching it in
          src/shared/bus-util.c.
        - debian/patches/CVE-2020-1712-4.patch: fix typo in function name in
          src/libsystemd/libsystemd.sym, src/libsystemd/sd-bus/sd-bus.c,
          src/systemd/sd-bus.h, src/shared/bus-util.c.
        - debian/libsystemd0.symbols: added new symbols.
        - CVE-2020-1712
      * This package does _not_ contain the changes from 242-7ubuntu3.3 in
        eoan-proposed.
    
     -- Marc Deslauriers <email address hidden>  Tue, 04 Feb 2020 20:04:45 -0500
  • systemd (242-7ubuntu3.3) eoan; urgency=medium
    
      [ Dariusz Gadomski ]
      * d/p/lp1762391/0001-Call-getgroups-to-know-size-of-supplementary-groups-.patch,
        d/p/lp1762391/0002-user-util-tweak-to-in_gid.patch,
        d/p/lp1762391/0003-user-util-Add-helper-functions-for-gid-lists-operati.patch,
        d/p/lp1762391/0004-execute-Restore-call-to-pam_setcred.patch,
        d/p/lp1762391/0005-execute-Detect-groups-added-by-PAM-and-merge-them-wi.patch,
        d/p/lp1762391/0006-test-Add-tests-for-gid-list-ops.patch,
        d/p/lp1762391/0007-execute-add-const-to-array-parameters-where-possible.patch,
        d/p/lp1762391/0008-execute-allow-pam_setcred-to-fail-ignore-errors.patch:
        - Restore call to pam_setcred (LP: #1762391)
    
      * d/p/lp1846232/0001-network-honor-MTUBytes-setting.patch,
        d/p/lp1846232/0002-network-bump-MTU-bytes-only-when-MTUByte-is-not-set.patch:
        - do not always bump MTU with additional 4bytes (LP: #1846232)
      * d/p/lp1671951-network-set-ipv6-mtu-after-link-up-or-device-mtu-cha.patch:
        - set ipv6 mtu at correct time (LP: #1671951)
      * d/p/lp1845909/0001-network-rename-linux_configure_after_setting_mtu-to-linux.patch,
        d/p/lp1845909/0002-network-add-link-setting_genmode-flag.patch,
        d/p/lp1845909/0003-network-if-ipv6ll-is-disabled-enumerate-tentative-ipv6-ad.patch,
        d/p/lp1845909/0004-network-drop-foreign-config-after-addr_gen_mode-has-been-.patch,
        d/p/lp1845909/0005-network-drop-IPv6LL-address-when-LinkLocalAddressing.patch:
        - drop foreign config and raise interface after setting genmode
          (LP: #1845909)
      * d/t/storage: without scsi_debug, skip test (LP: #1847816)
    
     -- Dan Streetman <email address hidden>  Wed, 22 Jan 2020 16:44:35 -0500
  • systemd (242-7ubuntu3.2) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/extra/dhclient-enter-resolved-hook:
        - Replace use of bash-only &> with > and 2> (LP: #1849608)
      * d/p/lp1849658-resolved-set-stream-type-during-DnsStream-creation.patch:
        - Fix bug in refcounting TCP stream types (LP: #1849658)
      * d/extra/dhclient-enter-resolved-hook: cleanup temp $newstate file
    
      [ Rafael David Tinoco ]
      * Add support to KeepConfiguration= fixing behaviour for HA (LP: #1815101)
        - d/p/lp1815101-01-networkd-add-support-to-keep-configuration.patch
        - d/p/lp1815101-02-networkd-stop-clients-when-networkd-shuts-down.patch
        - d/p/lp1815101-03-network-add-KeepConfiguration-dhcp-on-stop.patch
        - d/p/lp1815101-04-network-make-KeepConfiguration-static-drop-DHCP-addr.patch
        - d/p/lp1815101-05-man-add-documentation-about-KeepConfiguration.patch
    
    systemd (242-7ubuntu3.1) eoan; urgency=medium
    
      [ Balint Reczey ]
      * Fix shutdown and related actions from the login screen (LP: #1847896)
        File: debian/patches/logind-consider-greeter-sessions-suitable-as-display-sess.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b407dfd8c9dc81594553c27467c35b383333d74c
      * debian/gbp.conf: Set debian-branch to ubuntu-eoan
        File: debian/gbp.conf
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f399ce2cf4701a2dbb4b3505d2dd17a210d62f5c
    
      [ Dan Streetman ]
      * Fix bogus routes after DHCP lease change (LP: #1831787)
        Files:
        - debian/patches/lp1831787/0001-networkd-Add-back-static-routes-after-DHCPv4-lease-e.patch
        - debian/patches/lp1831787/0002-network-set-preferred-source-in-removing-route-entry.patch
        - debian/patches/lp1831787/0003-network-lower-log-level-about-critical-connection.patch
        - debian/patches/lp1831787/0004-network-reset-Link-dhcp4_configured-flag-earlier.patch
        - debian/patches/lp1831787/0005-network-split-dhcp_lease_lost-into-small-pieces.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ced3f5c2f619083f7beb164d94d4ccfe52222fe8
      * Set src address for dhcp 'classless' routes (LP: #1835581)
        File: debian/patches/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6a7ef370fb1335548448920be4ae6176b67044a8
      * Allows cache=no-negative option to be set, ignoring negative answers to
        be cached (LP: #1668771)
        File: debian/patches/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=27def26f5b1d1b8ba314c4a925fc1b7c43837f86
    
     -- Dan Streetman <email address hidden>  Fri, 01 Nov 2019 16:33:08 -0400
  • systemd (242-7ubuntu3) eoan; urgency=medium
    
      * Fix using domain set by DHCP as search domain (LP: #1846509)
        File: debian/patches/network-do-not-use-ordered_set_printf-for-DOMAINS-or-ROUT.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=210e1f979d27c7eeaff87c0f16240ec415d0a043
      * Add test for UseDomains=true default setting
        File: debian/patches/debian/Ubuntu-test-UseDomains-true-default-setting.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a2c01a848969d3c5cbe67b3c26ff641e367edba7
      * Refresh patches
    
     -- Balint Reczey <email address hidden>  Fri, 11 Oct 2019 16:19:01 +0200
  • systemd (242-7ubuntu2) eoan; urgency=medium
    
      [ Bryan Quigley ]
      * Update patch for resolved: Mitigate DVE-2018-0001, by retrying NXDOMAIN
        without EDNS0. This disables the workaround if DNSSEC=yes.
        Falls back directly to simple UDP instead of trying an intermediate.
        (LP: #1796501)
        Author: Bryan Quigley
        File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2974114ed9b89ea922a23893e8eff70d5cac77fe
    
      [ Balint Reczey ]
      * Pass personality test even when i386 userland runs on amd64 kernel
        File: debian/patches/debian/UBUNTU-test-Pass-personality-test-even-when-i386-userland-runs-o.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=42e0bfc426f19430f6768ef4922a9531a345765f
      * Refresh patches
        Files:
        - debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
        - debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
        - debian/patches/test-execute-Filter-dev-.lxc-in-exec-dynamicuser-statedir.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ff8387be07322230e9afe87f1c767ee241e9a0e1
    
     -- Balint Reczey <email address hidden>  Tue, 08 Oct 2019 22:31:17 +0200
  • systemd (242-7ubuntu1) eoan; urgency=medium
    
      * Merge from unstable
      * UBUNTU: drop setting fs.protected_regular and fs.protected_fifos from
        sysctl defaults shipped by systemd (LP: #1845637)
        File: debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6e583847b04c3f83a50f3bd6947dcae6a73d8388
      * test-execute: Filter /dev/.lxc in exec-dynamicuser-statedir.service.
        It appears in nested LXC containers and broke the armhf autopkgtest.
        (LP: #1845337)
        File: debian/patches/test-execute-Filter-dev-.lxc-in-exec-dynamicuser-statedir.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=75af888d5552f706b86182a56f12ccc8e83ca04e
    
    systemd (242-7) unstable; urgency=medium
    
      * sleep: properly pass verb to sleep script
      * core: factor root_directory application out of apply_working_directory.
        Fixes RootDirectory not working when used in combination with User.
        (Closes: #939408)
      * shared/bus-util: drop trusted annotation from
        bus_open_system_watch_bind_with_description().
        This ensures that access controls on systemd-resolved's D-Bus interface
        are enforced properly.
        (CVE-2019-15718, Closes: #939353)
    
     -- Balint Reczey <email address hidden>  Wed, 02 Oct 2019 14:13:28 +0200
  • systemd (242-6ubuntu1) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/t/control: mark udev test skippable.
        The udev test will return 77 (from udev-test.pl) if it can't
        setup the test environment; mark it skipped in that case.
        Author: Dan Streetman
        File: debian/tests/control
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c3419bd2a30a78d05cca9c38e50c9726de7e7632
    
      [ Dimitri John Ledkov ]
      * debian/extra/wrap_cl.py: add changelog formatter
        Author: Dimitri John Ledkov
        Files:
        - debian/extra/wrap_cl.py
        - debian/gbp.conf
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=26e69bceab9cec8df64cdca18cd71e7c0874f8b3
    
      [ Balint Reczey ]
      * debian/test/boot-and-services: Skip AppArmor tests in arm containers.
        The test is failing on armhf testbeds using containers
        File: debian/tests/boot-and-services
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=9d3b35df77aa939365563a4edaee54ebb7f559a3
      * d/t/control: run udev tests only with isolation-machine.
        It fails in Ubuntu CI armhf containers and may fail elsewhere, too.
        File: debian/tests/control
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4b4c9bf44f4b8d7f75a4204aff697f549c8aad7
      * Merge to Ubuntu from unstable
        - Dropped changes:
          * Skip starting systemd-remount-fs.service in containers
            even when /etc/fstab is present.
            File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch
          * resolved: add support for pipelined requests
            Files:
            - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch
            - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch
            - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch
            - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch
            - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch
            - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch
            - debian/patches/stream-track-type-of-DnsStream-object.patch
            - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f
          * pam-systemd: use secure_getenv() rather than getenv()
            File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c
          * support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * tests/storage: make the test more resilient.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
          * Wait for cryptsetup unit to start, before stopping.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
          * Fix typpo in storage test.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
        - Remaining changes:
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Switch gbp.conf to disco.
            File: debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
          * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository
          * debian/gbp.conf: Set tag format to ubuntu/*
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Refresh patches
      * debian/tests/boot-smoke: Restore exit handling Ubuntu delta lost in 241 merge
        File: debian/tests/boot-smoke
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3bad1cf23cc91299471542e83c589f2b6237a162
      * Skip falling back to device name when net_get_name(device) fails.
        This fixes network-manager and netplan.io autopkgtests
        File: debian/patches/Skip-falling-back-to-device-name-when-net_get_name-device.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c79fe0e2dc29834e0cd236ade6e4e44a6ffb74fa
    
    systemd (242-6) unstable; urgency=medium
    
      [ Dan Streetman ]
      * d/t/control: upstream test requires qemu-system-ppc on ppc64el
      * d/t/control: install seabios for upstream test.
        Some archs (at least arm64) qemu implementation require the vga bios.
    
      [ Michael Biebl ]
      * Drop unused lintian override
      * network: fix ListenPort= in [WireGuard] section (Closes: #936198)
      * d/e/r/73-usb-net-by-mac.rules: import net.ifnames only for network devices
        (Closes: #934589)
      * d/e/r/73-usb-net-by-mac.rules: skip if iface name was provided by
        user-space
      * Drop dbus activation stub service.
        Since dbus 1.11.0, a dbus-daemon that is run with --systemd-activation
        automatically assumes that o.fd.systemd1 is an activatable service.
        As a result, with a new enough dbus version,
        /usr/share/dbus-1/services/org.freedesktop.systemd1.service and
        /usr/share/dbus-1/system-services/org.freedesktop.systemd1.service
        become unnecessary and can be removed. (Closes: #914015)
      * Revert "core: check start limit on condition checks too"
        If a unit was referenced too often, it hit the restart limit and the
        unit was marked as failed. Fixes a regression introduced in v242.
        (Closes: #935829)
    
      [ Michael Prokop ]
      * README.Debian: document KillUserProcesses behavior in Debian
    
    systemd (242-5) unstable; urgency=medium
    
      [ Dan Streetman ]
      * d/rules: add CONFFGLAGS_UPSTREAM to dh_auto_configure -- params
    
      [ Michael Biebl ]
      * core: never propagate reload failure to service result.
        Fixes a regression introduced in v239 where the main process of a
        service unit gets killed on reload if ExecReload fails. (Closes: #936032)
      * shared/seccomp: add sync_file_range2.
        Some architectures need the arguments to be reordered because of alignment
        issues. Otherwise, it's the same as sync_file_range.
        Fixes sync_file_range failures in nspawn containers on arm, ppc.
        (Closes: #935091)
      * bash-completion: don't sort syslog priorities.
        By default, the available completions are sorted alphabetically, which
        is counterproductive in case of syslog priorities. Override the default
        behavior using the `nosort` option. (Closes: #913222)
      * test-bpf: skip test when run inside containers
    
    systemd (242-4) unstable; urgency=medium
    
      * Upload to unstable
    
    systemd (242-3) experimental; urgency=medium
    
      [ Dan Streetman ]
      * d/t/boot-and-services: fix test_failing()
      * d/t/boot-and-services: check for any kernel message, not just first kernel
        message (Closes: #929730)
      * d/t/upstream: add TEST-30, TEST-34 to blacklist
      * d/t/timedated: replace systemctl is-active with systemctl show
      * d/t/control: root-unittests can break networking, add breaks-testbed
      * d/t/control: mark udev test skippable
      * d/t/upstream: always cleanup after (and before) each test
      * d/t/control: upstream test requires dmeventd
      * d/e/checkout-upstream: don't remove .git
      * d/e/checkout-upstream: move change to debian/ files above other changes
      * d/e/checkout-upstream: add UPSTREAM_KEEP_CHANGELOG param
      * d/e/checkout-upstream: create git commits for each change
      * d/e/checkout-upstream: switch from 'quilt' to 'native' format
      * d/e/checkout-upstream: set user.name, user.email if unset
      * d/t/storage: change plaintext_name to include testname
      * d/t/storage: increase wait for plaintext_dev from 5 to 30 seconds
      * d/t/storage: wait for service to start, only stop if active
      * d/t/storage: don't search for 'scsi_debug' in ask_password
      * d/t/storage: manage scsi_debug using add_hosts (Closes: #929728)
      * d/t/storage: use short timeout waiting for scsi_debug block dev to appear
      * d/t/storage: convert password agent into normal Thread
      * d/t/storage: fail if socket info not in ask_password contents
      * d/t/boot-smoke: pass failure reason to fail() to print instead of separate
        echo
      * d/t/boot-smoke: in fail() set +e so errors are ignored while gathering
        data
      * d/t/boot-smoke: gather still running jobs in fail()
      * d/t/boot-smoke: wait for is-system-running
      * d/t/boot-smoke: call fail if pidof polkitd fails
      * d/t/boot-smoke: remove check for running jobs
    
      [ Michael Biebl ]
      * d/t/boot-smoke: check for NetworkManager instead of D-Bus activated
        polkitd (Closes: #934992)
    
    systemd (242-2) experimental; urgency=medium
    
      [ Michael Biebl ]
      * Drop dependency on lsb-base.
        It is only needed when booting with sysvinit and initscripts, but
        initscripts already Depends on lsb-base (see #864999).
      * Stop removing enablement symlinks in /etc/systemd/system.
        With v242 this is no longer necessary as `ninja install` will no longer
        create those symlinks.
      * Replace manual removal of halt-local.service with upstream patch
    
      [ Dimitri John Ledkov ]
      * Build manpages in .deb variant.
        Upstream snapshots are switching to building manpages off by default.
    
      [ Luca Boccassi ]
      * Enable portabled and install related files in systemd-container.
        Keep disabled for the udeb profile. (Closes: #918606)
    
    systemd (242-1) experimental; urgency=medium
    
      * New upstream version 242
        - Change ownership/mode of the execution directories also for static users
          (Closes: #919231)
        - A new boolean sandboxing option RestrictSUIDSGID= has been added that is
          built on seccomp. When turned on, creation of SUID/SGID files is
          prohibited. The NoNewPrivileges= and the new RestrictSUIDSGID= options
          are now implied if DynamicUser= is turned on for a service.
          (Closes: #928102, CVE-2019-3843, CVE-2019-3844)
      * Drop Revert-udev-network-device-renaming-immediately-give.patch.
        This patch needs ongoing maintenance work to be adapted to new releases
        and fails to apply with v242. Instead of investing more time into it we
        are going to drop the patch as it was a hack anyway.
      * Rebase patches
      * Drop pre-stretch migration code
      * Drop /sbin/udevadm compat symlink (Closes: #852580)
      * socket-util: Make sure flush_accept() doesn't hang on unexpected
        EOPNOTSUPP
      * Enable regexp matching support in journalctl using pcre2 (Closes: #898892)
      * Switch from libidn to libidn2 (Closes: #928615)
    
     -- Balint Reczey <email address hidden>  Thu, 12 Sep 2019 10:28:46 +0200
  • systemd (242-2ubuntu2) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch:
        - Set src address for dhcp 'classless' routes (LP: #1835581)
    
      [ Jorge Niedbalski ]
      * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch:
        Allows cache=no-negative option to be set, ignoring negative
        answers to be cached (LP: #1668771).
    
     -- Dan Streetman <email address hidden>  Fri, 02 Aug 2019 18:35:02 -0400
  • systemd (242-2ubuntu1) eoan; urgency=medium
    
      * Merge to Ubuntu from experimental
        - Dropped changes:
          * Skip starting systemd-remount-fs.service in containers
            even when /etc/fstab is present.
            File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch
          * debian/tests: Switch to gdm
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Cherrypick proposed patch to fix LinkLocalAddressing post-unify-MTU settings.
            File: debian/patches/networkd-honour-LinkLocalAddressing.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cd9ba0d0f47634c9e5d862b8208cdc3178f25496
          * Import patches to support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            - debian/patches/test-test-functions-on-PP64-use-vmlinux.patch
            - debian/patches/test-test-functions-on-PPC64-use-hvc0-console.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * resolved: add support for pipelined requests
            Files:
            - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch
            - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch
            - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch
            - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch
            - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch
            - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch
            - debian/patches/stream-track-type-of-DnsStream-object.patch
            - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/Install-routes-after-addresses-are-ready.patch
            - debian/patches/Move-link_check_ready-to-later-in-the-file.patch
            - debian/patches/tests-Add-test-for-IPv6-source-routing.patch
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * udevadm: Fix segfault with subsystem-match containing '/' (Closes: #919206)
            File: debian/patches/udevadm-fix-segfault.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=736973d38676301f276716f22a746aed2489baac
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Fix comment about why we disable hwclock.service.
            File: debian/systemd.links
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8473f88fffdb9db1f5ba547bb692a911997f2569
          * debian/tests/storage: fix for LUKS2 and avoid interactive password prompts.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594ebf325816e76a8c58043c56fc94f2d52b2a6
          * d/p/network-remove-routing-policy-rule-from-foreign-rule.patch
          * d/p/network-do-not-remove-rule-when-it-is-requested-by-e.patch
            - Fix RoutingPolicyRule does not apply correctly
          * virt: detect WSL environment as a container
          * pam-systemd: use secure_getenv() rather than getenv()
            File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c
          * core: queue jobs on uninstall to generate PropertiesChanged signal.
            File: debian/patches/core-when-we-uninstall-a-job-add-unit-to-dbus-queue.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=241deca98fb9a0f1ba9a6ba781f738fb31a3bd80
          * systemd-stable: cherrypick many bugfixes from the v240-stable branch.
            Files:
            - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch
            - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch
            - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch
            - debian/patches/Fix-omission-in-docs.patch
            - debian/patches/Log-the-job-being-merged.patch
            - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch
            - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch
            - debian/patches/Update-systemd-system.conf.xml.patch
            - debian/patches/basic-prioq-add-prioq_peek_item.patch
            - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch
            - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch
            - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch
            - debian/patches/core-mount-move-static-function-earlier-in-file.patch
            - debian/patches/curl-util-fix-use-after-free.patch
            - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch
            - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch
            - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch
            - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch
            - debian/patches/machinectl-fix-argument-index-in-error-log.patch
            - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch
            - debian/patches/man-fix-reference.patch
            - debian/patches/man-fix-volume-num-of-journalctl.patch
            - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch
            - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch
            - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch
            - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch
            - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch
            - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch
            - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch
            - debian/patches/pager-improve-english-a-bit.patch
            - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch
            - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch
            - debian/patches/pull-fix-invalid-error-check.patch
            - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch
            - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch
            - debian/patches/test-execute-unset-HOME-before-testing.patch
            - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch
            - debian/patches/udev-val-may-be-NULL-use-strempty.patch
            - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch
            - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch
            - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch
            - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724
          * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints.
            Files:
            - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch
            - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch
            - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch
            - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11
          * Cherry-pick patches to fix FTBFS with GCC 9:
            - d/p/strv-rework-FOREACH_STRING-macro.patch
            - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
        - Remaining changes:
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Switch gbp.conf to disco.
            File: debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
          * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository
          * debian/gbp.conf: Set tag format to ubuntu/*
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * tests/storage: make the test more resilient.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * Wait for cryptsetup unit to start, before stopping.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * Fix typpo in storage test.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Refresh patches
      * debian/gbp.conf: Change debian-branch to ubuntu-eoan
      * Fix networking with Linux 5.2
        Files:
        - debian/patches/network-do-not-send-ipv6-token-to-kernel.patch
        - debian/patches/networkd-fix-link_up-12505.patch
        https://github.com/systemd/systemd/commit/4eb086a38712ea98faf41e075b84555b11b54362
        https://github.com/systemd/systemd/commit/9f6e82e6eb3b6e73d66d00d1d6eee60691fb702f
    
    systemd (242-2) experimental; urgency=medium
    
      [ Michael Biebl ]
      * Drop dependency on lsb-base.
        It is only needed when booting with sysvinit and initscripts, but
        initscripts already Depends on lsb-base (see #864999).
      * Stop removing enablement symlinks in /etc/systemd/system.
        With v242 this is no longer necessary as `ninja install` will no longer
        create those symlinks.
      * Replace manual removal of halt-local.service with upstream patch
    
      [ Dimitri John Ledkov ]
      * Build manpages in .deb variant.
        Upstream snapshots are switching to building manpages off by default.
    
      [ Luca Boccassi ]
      * Enable portabled and install related files in systemd-container.
        Keep disabled for the udeb profile. (Closes: #918606)
    
    systemd (242-1) experimental; urgency=medium
    
      * New upstream version 242
        - Change ownership/mode of the execution directories also for static users
          (Closes: #919231)
        - A new boolean sandboxing option RestrictSUIDSGID= has been added that is
          built on seccomp. When turned on, creation of SUID/SGID files is
          prohibited. The NoNewPrivileges= and the new RestrictSUIDSGID= options
          are now implied if DynamicUser= is turned on for a service.
          (Closes: #928102, CVE-2019-3843, CVE-2019-3844)
      * Drop Revert-udev-network-device-renaming-immediately-give.patch.
        This patch needs ongoing maintenance work to be adapted to new releases
        and fails to apply with v242. Instead of investing more time into it we
        are going to drop the patch as it was a hack anyway.
      * Rebase patches
      * Drop pre-stretch migration code
      * Drop /sbin/udevadm compat symlink (Closes: #852580)
      * socket-util: Make sure flush_accept() doesn't hang on unexpected
        EOPNOTSUPP
      * Enable regexp matching support in journalctl using pcre2 (Closes: #898892)
      * Switch from libidn to libidn2 (Closes: #928615)
    
    systemd (241-3) unstable; urgency=high
    
      [ Michael Biebl ]
      * Drop systemd-shim alternative from libpam-systemd.
        A fixed systemd-shim package which works with newer versions of systemd
        is unlikely to happen given that the systemd-shim package has been
        removed from the archive. Drop the alternative dependency from
        libpam-systemd accordingly.
      * Properly remove duplicate directories from systemd package.
        When removing duplicate directories from the systemd package, sort the
        list of directories in reverse order so we properly delete nested
        directories.
      * udev: Run programs in the specified order (Closes: #925190)
      * bash-completion: Use default completion for redirect operators
        (Closes: #924541)
      * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's
        (Closes: #815582)
      * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf"
        Apparently Conflicts= are not a reliable mechanism to ensure alternative
        NTP implementations take precedence over systemd-timesyncd.
        (Closes: #902026)
      * network: Fix routing policy rule issue.
        When multiple links request a routing policy, make sure they are all
        applied correctly. (Closes: #924406)
      * pam-systemd: Use secure_getenv() rather than getenv()
        Fixes a vulnerability in the systemd PAM module which insecurely uses
        the environment and lacks seat verification permitting spoofing an
        active session to PolicyKit. (CVE-2019-3842)
    
      [ Martin Pitt ]
      * Enable udev autopkgtest in containers.
        This test doesn't actually need udev.service (which is disabled in
        containers) and works fine in LXC.
      * Enable boot-and-service autopkgtest in containers
        - Skip tests which can't work in containers.
        - Add missing rsyslog test dependency.
        - e2scrub_reap.service fails in containers, ignore (filed as #926138)
        - Relax pgrep pattern for gdm, as there's no wayland session in
          containers.
    
    systemd (241-2) unstable; urgency=medium
    
      [ Martin Pitt ]
      * debian/tests/boot-smoke: Create journal and udevdb artifacts on all
        failures
      * autopkgtests: Replace obsolete $ADT_* variables
      * networkd-test: Ignore failures of test_route_only_dns* in containers.
        This test exposes a race condition when running in LXC, see issue #11848
        for details. Until that is understood and fixed, skip the test as it's
        not a recent regression. (Closes: #924539)
      * Bump Standards-Version to 4.3.0.
        No changes necessary.
      * debian/tests/boot-smoke: Only check current boot for connection timeouts.
        Otherwise we'll catch some
            Failed to resolve group 'render': Connection timed out
        messages that happen in earlier boots during VM setup, before the
        "render" group is created.
        Fixes https://github.com/systemd/systemd/issues/11875
      * timedated: Fix emitted value when ntp client is enabled/disabled.
        Fixes a regression introduced in 241.
      * debian/tests/timedated: Check enabling/disabling NTP.
        Assert that `timedatectl set-ntp` correctly controls the service, sets
        the `org.freedesktop.timedate1 NTP` property, and sends the right
        `PropertiesChanged` signal.
        This reproduces <https://github.com/systemd/systemd/issues/11944> and
        also the earlier <https://github.com/systemd/systemd/issues/9672>.
    
      [ Michael Biebl ]
      * Disable fallback DNS servers in resolved (Closes: #923081)
      * cgtop: Fix processing of controllers other than CPU (Closes: #921280)
      * udev: Restore debug level when logging a failure in the external prog
        called by IMPORT{program} (Closes: #924199)
      * core: Remove "." path components from required mount paths.
        Fixes mount related failures when a user's home directory contains "/./"
        (Closes: #923881)
      * udev.init: Use new s-s-d --notify-await to start udev daemon.
        Fixes a race condition during startup under SysV init.
        Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version
        of start-stop-daemon which supports --notify-await is installed.
        (Closes: #908796)
      * Make /dev/dri/renderD* accessible to group "render"
        Follow upstream and make render nodes available to a dedicated system
        group "render" instead of "video". Keep the uaccess tag for local,
        active users.
    
    systemd (241-1) unstable; urgency=medium
    
      [ Adam Borowski ]
      * Make libpam-systemd Provide: logind, default-logind.
        This allows alternate logind implementations such as elogind, without
        having to recompile every dependent package -- as long as the client API
        remains compatible.
        These new virtual packages got policy-approved in #917431. (Closes: #915407)
    
      [ Felipe Sateler ]
      * New upstream version 241
        - Refresh patches
        - Backport upstream fix for Driver= matches in .network files
    
      [ Martin Pitt ]
      * debian/libsystemd0.symbols: Add new symbol from release 241
      * Fix various bugs and races in networkd tests.
        This should get the autopkgtest back to green, which regressed with
        dnsmasq 2.80.
    
    systemd (240-6ubuntu10) eoan; urgency=medium
    
      [ Jeremy Soller ]
      * random-util: eat up bad RDRAND values seen on AMD CPUs.
        This fixes AMD Ryzen 3000 series failing to boot (LP: #1835809)
    
      [ Balint Reczey]
      * Cherry-pick patches to fix FTBFS with GCC 9:
        - d/p/strv-rework-FOREACH_STRING-macro.patch
        - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
    
     -- Balint Reczey <email address hidden>  Wed, 24 Jul 2019 21:04:20 +0200
  • systemd (241-7ubuntu1) eoan; urgency=medium
    
      * Merge from unstable
        - Dropped changes:
          * debian/tests: Switch to gdm
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Cherrypick proposed patch to fix LinkLocalAddressing post-unify-MTU settings.
            File: debian/patches/networkd-honour-LinkLocalAddressing.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=cd9ba0d0f47634c9e5d862b8208cdc3178f25496
          * Import patches to support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            - debian/patches/test-test-functions-on-PP64-use-vmlinux.patch
            - debian/patches/test-test-functions-on-PPC64-use-hvc0-console.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/Install-routes-after-addresses-are-ready.patch
            - debian/patches/Move-link_check_ready-to-later-in-the-file.patch
            - debian/patches/tests-Add-test-for-IPv6-source-routing.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * udevadm: Fix segfault with subsystem-match containing '/' (Closes: #919206)
            File: debian/patches/udevadm-fix-segfault.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=736973d38676301f276716f22a746aed2489baac
          * Blacklist TEST-10-ISSUE-2467 #11706
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f93b9e46b54388370da7b0cd7f858031be3a2578
          * Fix comment about why we disable hwclock.service.
            File: debian/systemd.links
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8473f88fffdb9db1f5ba547bb692a911997f2569
          * debian/tests/storage: fix for LUKS2 and avoid interactive password prompts.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594ebf325816e76a8c58043c56fc94f2d52b2a6
          * d/p/network-remove-routing-policy-rule-from-foreign-rule.patch
          * d/p/network-do-not-remove-rule-when-it-is-requested-by-e.patch
            - Fix RoutingPolicyRule does not apply correctly
          * core: queue jobs on uninstall to generate PropertiesChanged signal.
            File: debian/patches/core-when-we-uninstall-a-job-add-unit-to-dbus-queue.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=241deca98fb9a0f1ba9a6ba781f738fb31a3bd80
          * systemd-stable: cherrypick many bugfixes from the v240-stable branch.
            Files:
            - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch
            - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch
            - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch
            - debian/patches/Fix-omission-in-docs.patch
            - debian/patches/Log-the-job-being-merged.patch
            - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch
            - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch
            - debian/patches/Update-systemd-system.conf.xml.patch
            - debian/patches/basic-prioq-add-prioq_peek_item.patch
            - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch
            - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch
            - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch
            - debian/patches/core-mount-move-static-function-earlier-in-file.patch
            - debian/patches/curl-util-fix-use-after-free.patch
            - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch
            - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch
            - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch
            - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch
            - debian/patches/machinectl-fix-argument-index-in-error-log.patch
            - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch
            - debian/patches/man-fix-reference.patch
            - debian/patches/man-fix-volume-num-of-journalctl.patch
            - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch
            - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch
            - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch
            - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch
            - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch
            - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch
            - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch
            - debian/patches/pager-improve-english-a-bit.patch
            - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch
            - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch
            - debian/patches/pull-fix-invalid-error-check.patch
            - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch
            - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch
            - debian/patches/test-execute-unset-HOME-before-testing.patch
            - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch
            - debian/patches/udev-val-may-be-NULL-use-strempty.patch
            - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch
            - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch
            - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch
            - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724
          * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints.
            Files:
            - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch
            - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch
            - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch
            - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11
          * Cherry-pick patches to fix FTBFS with GCC 9:
            - d/p/strv-rework-FOREACH_STRING-macro.patch
            - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
        - Remaining changes:
          * Skip starting systemd-remount-fs.service in containers
            even when /etc/fstab is present.
            File: debian/patches/debian/Skip-starting-systemd-remount-fs.service-in-containers.patch
          * resolved: add support for pipelined requests
            Files:
            - debian/patches/llmnr-add-comment-why-we-install-no-complete-handler-on-s.patch
            - debian/patches/resolved-add-comment-to-dns_stream_complete-about-its-err.patch
            - debian/patches/resolved-keep-stub-stream-connections-up-for-as-long-as-c.patch
            - debian/patches/resolved-only-call-complete-with-zero-argument-in-LLMNR-c.patch
            - debian/patches/resolved-restart-stream-timeout-whenever-we-managed-to-re.patch
            - debian/patches/stream-follow-coding-style-don-t-use-degrade-to-bool-for-.patch
            - debian/patches/stream-track-type-of-DnsStream-object.patch
            - debian/patches/transaction-simplify-handling-if-we-get-an-unexpected-DNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8ad1db08c2135af098a33957ce7cffbe21fb683f
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * virt: detect WSL environment as a container
            Files:
            - debian/patches/virt-detect-WSL-environment-as-a-container-id-wsl.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20b10ce955ad6ddb85c185a13e05a72c3e717f20
          * pam-systemd: use secure_getenv() rather than getenv()
            File: debian/patches/pam-systemd-use-secure_getenv-rather-than-getenv.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3291e9e8c3eafd0c8921cb26a0d5ee0fd563b3c
          * Set UseDomains to true, by default, on Ubuntu.
            File: debian/patches/debian/Ubuntu-UseDomains-by-default.patch
          * Enable systemd-resolved by default
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=05adfa0902115f51c1196ad623165a75bb8b4313
          * Create /etc/resolv.conf at postinst, pointing at the stub resolver.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ef4adf46bbbe2d22508b70b889d23da53b85039d
          * libnss-resolve: do not disable and stop systemd-resolved
            File: debian/libnss-resolve.postrm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=95577d14e84e19b614b83b2e24985d89e8c2dac0
          * Ignore failures to set Nice priority on services in containers.
            File: debian/patches/debian/Ubuntu-core-in-execute-soft-fail-setting-Nice-priority-when.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5b8e457f8d883fc6f55d33d46b3474926a495d29
          * units: set ConditionVirtualization=!private-users on journald audit socket.
            File: debian/patches/debian/Ubuntu-units-set-ConditionVirtualization-private-users-on-j.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=03ed18a9940731bbf794ad320fabf337488835c6
          * debian/tests: Enforce udev upgrade.
            Files:
            - debian/tests/boot-and-services
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f350b43ccc1aa31c745b4ccebbb4084d5cea41ff
          * Always setup /etc/resolv.conf on new installations.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=20bc8a37fa3c9620bed21a56a4eabd71db71d861
          * Ubuntu/extra: ship dhclient-enter hook.
            Files:
            - debian/extra/dhclient-enter-resolved-hook
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f3398a213f80b02bf3db0c1ce9e22d69f6d56764
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
          * Disable systemd-networkd-wait-online by default.
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=694473d812b50d2fefd6494d494ca02b91bc8785
          * postinst: drop empty/stock /etc/rc.local
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e7d071a26a79558771303b0b87f007e650eaebbe
          * Ship systemd sysctl settings.
            Files:
            - debian/patches/debian/UBUNTU-drop-kernel.-settings-from-sysctl-defaults-shipped.patch
            - debian/rules
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7cd041a6d0ef459e4b2a82d8ea5fa1ce05184dfb
          * systemd.postinst: enable persistent journal
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f94f18d9dbc085b6a9ff33c141a6e542142f85b5
          * Disable LLMNR and MulticastDNS by default
            Files:
            - debian/patches/debian/UBUNTU-resolved-disable-global-LLMNR-and-MulticastDNS.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4ec428e83696a5cd0405b677a35e97681867629
          * Add "AssumedApparmorLabel=unconfined" to timedate1 dbus service file
            File: debian/patches/debian/UBUNTU-Add-AssumedApparmorLabel-unconfined-to-timedate1-dbus.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5ad0879e10bbe3d641f940260b93c7eb2cf4624c
          * debian/tests/systemd-fsckd: update assertions expectations for v237
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d5becd9a416b55dcdb7b9a7aba60c4e3d304e6a6
          * test/test-functions: launch qemu-system with -vga none.
            File: debian/patches/debian/UBUNTU-test-test-functions-launch-qemu-with-vga-none.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=90af1fa893cce5ed49999d16da0b793da6523394
          * tests/boot-smoke: ignore udevd connection timeouts resolving colord group.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e1477b764fa9ef23f5181ef3d31a1332191c3e0b
          * Drop systemd.prerm safety check.
            File: debian/systemd.prerm
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0244c4d56556317f14eecc2f51871969ef02ba7b
          * wait-online: do not wait, if no links are managed (neither configured, or failed).
            File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=31f04c3fc769dacb3cf2a78240a1710a99a865b8
          * journald.service: set Nice=-1 to dodge watchdog on soft lockups.
            File: debian/patches/debian/UBUNTU-journald.service-set-Nice-1-to-dodge-watchdog-on-soft-loc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=e0a9aeffac556492bf517ce2d23313ff7a277926
          * Workaround captive portals not responding to EDNS0 queries (DVE-2018-0001).
            File: debian/patches/resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=87d3fe81b7281687ecf3c0b9a8356e90cc714d0b
          * Recommend networkd-dispatcher
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1e3b2c7e4757119da0d550b0b3c0a6626a176dc
          * networkd: if RA was implicit, do not await ndisc_configured.
            File: debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2f749ff528d1b788aa4ca778e954c16b213ee629
          * udev-udeb: ship modprobe.d snippet to force scsi_mod.scan=sync in d-i.
            Files:
            - debian/extra/modprobe.d-udeb/scsi-mod-scan-sync.conf
            - debian/udev-udeb.install
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=eb6d8a2b9504917abb7aa2c4035fdbb7b98227f7
          * Disable dh_installinit generation of tmpfiles for the systemd package.
            Files:
            - debian/rules
            - debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fd144cbe31cc7a9383cc76f21f4b84c22a9dd1b
          * Enable EFI/bootctl on armhf.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=043122f7d8a1487bfd357e815a6ece1ceea6e7d1
          * boot-and-services: stderr is ok, for status command on the c1 container.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da14d34e7cc33c44ad67e64c9fd092f8cc1675f9
          * Skip systemd-fsckd on arm64, because of broken/lack of clean shutdown.
            File: debian/tests/systemd-fsckd
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=bf5b501ac934497dbef5f64908ff37643dc7288e
          * adt: boot-and-services: assert any kernel syslog messages.
            File: debian/tests/boot-and-services
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=29dc34f7a6e5dc505f6212c17c42e4420b47ed16
          * debian/extra/start-udev: Set scsi_mod scan=sync even if it's builtin to the kernel (we previously only set it in modprobe.d)
            Files:
            - debian/extra/start-udev
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6b72628f8de991e2c67ac4289fc74daf3abe7d14
          * units: conditionalize more units to not start in containers.
            Files:
            - debian/patches/debian/UBUNTU-units-block-CAP_SYS_MODULE-units-in-containers-too.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=3689afa1a782de8c19a757459b6360de1195ad55
          * test-sleep: skip test_fiemap upon inapproriate ioctl for device.
            File: debian/patches/debian/UBUNTU-test-sleep-skip-test_fiemap-upon-inapproriate-ioctl-.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6ebb5b9f6b77760a5470e8a780d69875b1db76f7
          * Re-add support for /etc/writable for core18
            File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=a5b5fca66c1127068e4ce0cc9ab497814211f4f7
          * debian/control: strengthen dependencies.
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=d1ecf0c372f5212129c85ae60fddf26b2271a1fe
          * Improve autopkgtest success rate, by bumping up timeouts
            File: debian/patches/debian/UBUNTU-bump-selftest-timeouts.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c05586d9da033bbfd6b6a74e10b87520843c7c48
          * units: Disable journald Watchdog
            File: debian/patches/debian/UBUNTU-units-disable-journald-watchdog.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=64d2b4f1d0d057073fba585f19823332e2a6eed5
          * Add conflicts with upstart and systemd-shim
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=83ed7496afc7c27be026014d109855f7d0ad1176
          * Specify Ubuntu's Vcs-Git
            File: debian/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fd832930ef280c9a4a9dda2440d5a46a6fdb6232
          * debian/systemd.postinst: Skip daemon-reexec and try-restarts during shutdown
            File: debian/systemd.postinst
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=51daab96ae79483b5e5fb62e1e0477c87ee11fd1
          * Switch gbp.conf to disco.
            File: debian/gbp.conf
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=fea585b259e3e766d8d3dbc9690e879c054ddc87
          * core: set /run size to 10%, like initramfs-tools does.
            File: debian/patches/debian/UBUNTU-core-set-run-size-to-10-like-initramfs-tools-does.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1fac2568fe716dc1a41bada78293dc6327a6df0d
          * support PPC64LE qemu based testing.
            Files:
            - debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=483a4daba07f809883883e8e8b9c365cfbf7256e
          * core: Revert strict mount namespacing/sandboxing, until LXD allows the needed mounts.
            File: debian/patches/Revert-namespace-be-more-careful-when-handling-namespacin.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=030919ba5e4931d6ee576d0259fae67fe4ed9770
          * networkd: [Route] PreferredSource not working in *.network files.
            Files:
            - debian/patches/debian/UBUNTU-networkd-if-RA-was-implicit-do-not-await-ndisc_con.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b4e2ee0b2ac1be2ae78952890a56a2d5398df518
          * debian/tests: blacklist upstream test-24-unit-tests on ppc64le.
            File: debian/tests/upstream
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=8062b9a2712c390010d2948eaf764a1b52e68715
          * debian/control: Update Vcs-{Browser|Git} to Ubuntu's packaging repository
          * debian/gbp.conf: Set tag format to ubuntu/*
          * Only test that gdm3 comes up on amd64. Stalls on other arches.
            File: debian/tests/control
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
          * tests/storage: make the test more resilient.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
          * Fix false negative checking for running jobs after boot.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
          * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
            File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
          * Wait for cryptsetup unit to start, before stopping.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
          * Wait for systemctl is-system-running state.
            File: debian/tests/boot-smoke
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
          * Fix typpo in storage test.
            File: debian/tests/storage
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
          * random-util: eat up bad RDRAND values seen on AMD CPUs.
            File: debian/patches/+rdrand-workaround-on-amd.patch
            https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?h=ubuntu-eoan&id=6ab88231efca4b04b26de6cfb5d671be154aabe0
      * Refresh patches
    
    systemd (241-7) unstable; urgency=medium
    
      [ Michael Biebl ]
      * network: Fix failure to bring up interface with Linux kernel 5.2.
        Backport two patches from systemd master in order to fix a bug with 5.2
        kernels where the network interface fails to come up with the following
        error: "enp3s0: Could not bring up interface: Invalid argument"
        (Closes: #931636)
      * Use /usr/sbin/nologin as nologin shell.
        In Debian the nologin shell is installed in /usr/sbin, not /sbin.
        (Closes: #931850)
    
      [ Mert Dirik ]
      * 40-systemd: Don't fail if SysV init script uses set -u and $1 is unset
        (Closes: #931719)
    
    systemd (241-6) unstable; urgency=medium
    
      * ask-password: Prevent buffer overflow when reading from keyring.
        Fixes a possible memory corruption that causes systemd-cryptsetup to
        crash either when a single large password is used or when multiple
        passwords have already been pushed to the keyring. (Closes: #929726)
      * Clarify documentation regarding %h/%u/%U specifiers.
        Make it clear, that setting "User=" has no effect on those specifiers.
        Also ensure that "%h" is actually resolved to "/root" for the system
        manager instance as documented in the systemd.unit man page.
        (Closes: #927911)
      * network: Behave more gracefully when IPv6 has been disabled.
        Ignore any configured IPv6 settings when IPv6 has been disabled in the
        kernel via sysctl. Instead of failing completely, continue and log a
        warning instead. (Closes: #929469)
    
    systemd (241-5) unstable; urgency=medium
    
      * Revert "Add check to switch VTs only between K_XLATE or K_UNICODE"
        This change left the keyboard in an unusable state when exiting an X
        session. (Closes: #929229)
    
    systemd (241-4) unstable; urgency=medium
    
      * journal-remote: Do not request Content-Length if Transfer-Encoding is
        chunked (Closes: #927008)
      * systemctl: Restore "systemctl reboot ARG" functionality.
        Fixes a regression introduced in v240. (Closes: #928659)
      * random-util: Eat up bad RDRAND values seen on AMD CPUs.
        Some AMD CPUs return bogus data via RDRAND after a suspend/resume cycle
        while still reporting success via the carry flag.
        Filter out invalid data like -1 (and also 0, just to be sure).
        (Closes: #921267)
      * Add check to switch VTs only between K_XLATE or K_UNICODE.
        Switching to K_UNICODE from other than L_XLATE can make the keyboard
        unusable and possibly leak keypresses from X.
        (CVE-2018-20839, Closes: #929116)
      * Document that DRM render nodes are now owned by group "render"
        (Closes: #926886)
    
    systemd (241-3) unstable; urgency=high
    
      [ Michael Biebl ]
      * Drop systemd-shim alternative from libpam-systemd.
        A fixed systemd-shim package which works with newer versions of systemd
        is unlikely to happen given that the systemd-shim package has been
        removed from the archive. Drop the alternative dependency from
        libpam-systemd accordingly.
      * Properly remove duplicate directories from systemd package.
        When removing duplicate directories from the systemd package, sort the
        list of directories in reverse order so we properly delete nested
        directories.
      * udev: Run programs in the specified order (Closes: #925190)
      * bash-completion: Use default completion for redirect operators
        (Closes: #924541)
      * networkd: Clarify that IPv6 RA uses our own stack, no the kernel's
        (Closes: #815582)
      * Revert "Drop systemd-timesyncd.service.d/disable-with-time-daemon.conf"
        Apparently Conflicts= are not a reliable mechanism to ensure alternative
        NTP implementations take precedence over systemd-timesyncd.
        (Closes: #902026)
      * network: Fix routing policy rule issue.
        When multiple links request a routing policy, make sure they are all
        applied correctly. (Closes: #924406)
      * pam-systemd: Use secure_getenv() rather than getenv()
        Fixes a vulnerability in the systemd PAM module which insecurely uses
        the environment and lacks seat verification permitting spoofing an
        active session to PolicyKit. (CVE-2019-3842)
    
      [ Martin Pitt ]
      * Enable udev autopkgtest in containers.
        This test doesn't actually need udev.service (which is disabled in
        containers) and works fine in LXC.
      * Enable boot-and-service autopkgtest in containers
        - Skip tests which can't work in containers.
        - Add missing rsyslog test dependency.
        - e2scrub_reap.service fails in containers, ignore (filed as #926138)
        - Relax pgrep pattern for gdm, as there's no wayland session in
          containers.
    
    systemd (241-2) unstable; urgency=medium
    
      [ Martin Pitt ]
      * debian/tests/boot-smoke: Create journal and udevdb artifacts on all
        failures
      * autopkgtests: Replace obsolete $ADT_* variables
      * networkd-test: Ignore failures of test_route_only_dns* in containers.
        This test exposes a race condition when running in LXC, see issue #11848
        for details. Until that is understood and fixed, skip the test as it's
        not a recent regression. (Closes: #924539)
      * Bump Standards-Version to 4.3.0.
        No changes necessary.
      * debian/tests/boot-smoke: Only check current boot for connection timeouts.
        Otherwise we'll catch some
            Failed to resolve group 'render': Connection timed out
        messages that happen in earlier boots during VM setup, before the
        "render" group is created.
        Fixes https://github.com/systemd/systemd/issues/11875
      * timedated: Fix emitted value when ntp client is enabled/disabled.
        Fixes a regression introduced in 241.
      * debian/tests/timedated: Check enabling/disabling NTP.
        Assert that `timedatectl set-ntp` correctly controls the service, sets
        the `org.freedesktop.timedate1 NTP` property, and sends the right
        `PropertiesChanged` signal.
        This reproduces <https://github.com/systemd/systemd/issues/11944> and
        also the earlier <https://github.com/systemd/systemd/issues/9672>.
    
      [ Michael Biebl ]
      * Disable fallback DNS servers in resolved (Closes: #923081)
      * cgtop: Fix processing of controllers other than CPU (Closes: #921280)
      * udev: Restore debug level when logging a failure in the external prog
        called by IMPORT{program} (Closes: #924199)
      * core: Remove "." path components from required mount paths.
        Fixes mount related failures when a user's home directory contains "/./"
        (Closes: #923881)
      * udev.init: Use new s-s-d --notify-await to start udev daemon.
        Fixes a race condition during startup under SysV init.
        Add versioned dependency on dpkg (>= 1.19.3) to ensure that a version
        of start-stop-daemon which supports --notify-await is installed.
        (Closes: #908796)
      * Make /dev/dri/renderD* accessible to group "render"
        Follow upstream and make render nodes available to a dedicated system
        group "render" instead of "video". Keep the uaccess tag for local,
        active users.
    
    systemd (241-1) unstable; urgency=medium
    
      [ Adam Borowski ]
      * Make libpam-systemd Provide: logind, default-logind.
        This allows alternate logind implementations such as elogind, without
        having to recompile every dependent package -- as long as the client API
        remains compatible.
        These new virtual packages got policy-approved in #917431. (Closes: #915407)
    
      [ Felipe Sateler ]
      * New upstream version 241
        - Refresh patches
        - Backport upstream fix for Driver= matches in .network files
    
      [ Martin Pitt ]
      * debian/libsystemd0.symbols: Add new symbol from release 241
      * Fix various bugs and races in networkd tests.
        This should get the autopkgtest back to green, which regressed with
        dnsmasq 2.80.
    
     -- Balint Reczey <email address hidden>  Wed, 28 Aug 2019 17:19:28 +0200
  • systemd (240-6ubuntu13) eoan; urgency=medium
    
      * Drop s390x seccomp fix causing regression on s390x
        Files:
        - debian/patches/src-shared-seccomp-util.c-Add-mmap-definitions-for-s390.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=da95e1d022e94a4d3ce0b69bd6eb398c95d09f24
    
     -- Balint Reczey <email address hidden>  Mon, 26 Aug 2019 17:02:54 +0200
  • systemd (240-6ubuntu12) eoan; urgency=medium
    
      * Depends on g++-8 as well
        Files:
        - debian/control
        - debian/rules
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=5594b4f2ba2a4f68911ecebb5fab4f3cf99a5f30
    
     -- Dimitri John Ledkov <email address hidden>  Thu, 22 Aug 2019 16:41:11 +0100
  • systemd (240-6ubuntu11) eoan; urgency=medium
    
      [ Dan Streetman ]
      * d/p/lp1835581-src-network-networkd-dhcp4.c-set-prefsrc-for-classle.patch:
        - Set src address for dhcp 'classless' routes (LP: #1835581)
    
      [ Jorge Niedbalski ]
      * d/p/lp1668771-resolved-switch-cache-option-to-a-tri-state-option-s.patch:
        Allows cache=no-negative option to be set, ignoring negative
        answers to be cached (LP: #1668771).
    
      [ Jeremy Soller ]
      * random-util: eat up bad RDRAND values seen on AMD CPUs.
        This fixes AMD Ryzen 3000 series failing to boot (LP: #1835809)
    
      [ You-Sheng Yang ]
      * d/p/d/Revert-udev-network-device-renaming-immediately-give.patch:
        - udev: drop Revert-udev-network-device-renaming-immediately-give.patch.
          The removing patch was for the already deprecated
          "75-persistent-net-generator.rules" based interface renaming mechanism,
          and it's causing unnecessary problem when a system happends to NICs with
          same MAC address, e.g. Dell's MAC address pass-thru. (LP: #1837700)
    
      [ Dimitri John Ledkov ]
      * Cherrypick seccomp fixes for new kernel and glibc.
        Files:
        - debian/patches/seccomp-add-new-5.1-syscall-pidfd_send_signal-to-filter-s.patch
        - debian/patches/seccomp-add-rseq-to-default-list-of-syscalls-to-whitelist.patch
        - debian/patches/seccomp-allow-shmat-to-be-a-separate-syscall-on-architect.patch
        - debian/patches/seccomp-drop-mincore-from-system-service-syscall-filter-g.patch
        - debian/patches/seccomp-shm-get-at-dt-now-have-their-own-numbers-everywhe.patch
        - debian/patches/shared-seccomp-add-sync_file_range2.patch
        - debian/patches/src-shared-seccomp-util.c-Add-mmap-definitions-for-s390.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=627919b0cbcc7e094995f167f8c5eb899f801fd3
    
      * Build with gcc-8, otherwise tests segfault.
        Files:
        - debian/control
        - debian/rules
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1ca0100244e46b00a97dfa10a5d980de7bdc6735
    
     -- Dimitri John Ledkov <email address hidden>  Thu, 22 Aug 2019 15:03:45 +0100
  • systemd (240-6ubuntu10) eoan; urgency=medium
    
      [ Jeremy Soller ]
      * random-util: eat up bad RDRAND values seen on AMD CPUs.
        This fixes AMD Ryzen 3000 series failing to boot (LP: #1835809)
    
      [ Balint Reczey]
      * Cherry-pick patches to fix FTBFS with GCC 9:
        - d/p/strv-rework-FOREACH_STRING-macro.patch
        - d/p/test-systemctl-nspawn-use-const-char-instead-of-char-as-i.patch
    
     -- Balint Reczey <email address hidden>  Thu, 11 Jul 2019 10:35:01 +0200
  • systemd (240-6ubuntu9) eoan; urgency=medium
    
      * Fix typpo in storage test.
        File: debian/tests/storage
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=f28aa5fe4ab175b99b6ea702559c59ca473b4ca8
    
      * Fix bashism
        File: debian/extra/dhclient-enter-resolved-hook
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=0725c1169ddde4f41cacba7af3e546704e2206be
    
    systemd (240-6ubuntu8) eoan; urgency=medium
    
      * Only restart resolved on changes in dhclient enter hook.
        This prevents spurious restarts of resolved on rebounds when
        the addresses did not change. (LP: #1805183)
        Author: Julian Andres Klode
        File: debian/extra/dhclient-enter-resolved-hook
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
    
      * Wait for cryptsetup unit to start, before stopping.
        Patch from cascardo. Plus small refactor for readability. (LP: #1814373)
        File: debian/tests/storage
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
    
      * Wait for systemctl is-system-running state.
        File: debian/tests/boot-smoke
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
    
    systemd (240-6ubuntu7) eoan; urgency=medium
    
      * Revert "Add check to switch VTs only between K_XLATE or K_UNICODE"
        This reverts commit 60407728a1a453104e3975ecfdf25a254dd7cc44.
        Files:
        - debian/patches/Add-check-to-switch-VTs-only-between-K_XLATE-or-K_UNICODE.patch
        - debian/patches/Move-verify_vc_kbmode-to-terminal-util.c-as-vt_verify_kbm.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=18029ab5ff436bfb3b401f24cd1e3a4cf2a1579c
    
      * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1825378)
        Author: Dan Streetman
        Files:
        - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch
        - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch
        - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch
        - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11
    
      * Remove expected failure from passing test.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1829450)
        Author: Dan Streetman
        File: debian/tests/systemd-fsckd
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c43b12037d08555dc1d26593307726d7c7992df0
    
      * Fix false negative checking for running jobs after boot.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1825997)
        Author: Dan Streetman
        File: debian/tests/boot-smoke
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
    
      * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1814373)
        Author: Dan Streetman
        File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
    
     -- Dimitri John Ledkov <email address hidden>  Thu, 30 May 2019 21:45:50 +0100
  • systemd (240-6ubuntu8) eoan; urgency=medium
    
      * Only restart resolved on changes in dhclient enter hook.
        This prevents spurious restarts of resolved on rebounds when
        the addresses did not change. (LP: #1805183)
        Author: Julian Andres Klode
        File: debian/extra/dhclient-enter-resolved-hook
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=258893bae8cbb12670e4807636fe8f7e9fb5407a
    
      * Wait for cryptsetup unit to start, before stopping.
        Patch from cascardo. Plus small refactor for readability. (LP: #1814373)
        File: debian/tests/storage
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=b65aa350be7e61c65927fbc0921a750fcfaa51cd
    
      * Wait for systemctl is-system-running state.
        File: debian/tests/boot-smoke
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=776998f1f55c445b6e385cab69a4219c42d00838
    
     -- Dimitri John Ledkov <email address hidden>  Thu, 30 May 2019 14:59:04 +0100
  • systemd (240-6ubuntu7) eoan; urgency=medium
    
      * Revert "Add check to switch VTs only between K_XLATE or K_UNICODE"
        This reverts commit 60407728a1a453104e3975ecfdf25a254dd7cc44.
        Files:
        - debian/patches/Add-check-to-switch-VTs-only-between-K_XLATE-or-K_UNICODE.patch
        - debian/patches/Move-verify_vc_kbmode-to-terminal-util.c-as-vt_verify_kbm.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=18029ab5ff436bfb3b401f24cd1e3a4cf2a1579c
    
      * Cherrypick missing systemd-stable patches to unbreak wireguard peer endpoints.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1825378)
        Author: Dan Streetman
        Files:
        - debian/patches/network-wireguard-fixes-sending-wireguard-peer-setti.patch
        - debian/patches/network-wireguard-use-sd_netlink_message_append_sock.patch
        - debian/patches/sd-netlink-introduce-sd_netlink_message_append_socka.patch
        - debian/patches/test-network-add-more-checks-in-NetworkdNetDevTests..patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=4046f515e40c4dc80d18d2303466737f1f451f11
    
      * Remove expected failure from passing test.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1829450)
        Author: Dan Streetman
        File: debian/tests/systemd-fsckd
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c43b12037d08555dc1d26593307726d7c7992df0
    
      * Fix false negative checking for running jobs after boot.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1825997)
        Author: Dan Streetman
        File: debian/tests/boot-smoke
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=aeb01631efbaf3fe851dee15d496e0b66b5c347f
    
      * Cherrypick ask-password: prevent buffer overrow when reading from keyring.
        Signed-off-by: Dimitri John Ledkov <email address hidden> (LP: #1814373)
        Author: Dan Streetman
        File: debian/patches/ask-password-prevent-buffer-overrow-when-reading-fro.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=6d6e9cbd4fc6e018031a4762e88f2c3aa19e24e8
    
     -- Dimitri John Ledkov <email address hidden>  Wed, 29 May 2019 19:54:37 +0100
  • systemd (240-6ubuntu6) eoan; urgency=medium
    
      * Add check to switch VTs only between K_XLATE or K_UNICODE.
        Switching to K_UNICODE from other than L_XLATE can make the keyboard
        unusable and possibly leak keypresses from X. (LP: #1803993)
    
     -- Balint Reczey <email address hidden>  Thu, 16 May 2019 23:22:15 +0200
  • systemd (240-6ubuntu5) disco; urgency=medium
    
      * systemd-stable: cherrypick many bugfixes from the v240-stable branch.
        Includes many documentation fixes, memory safety (use after free, read
        overruns, etc), networkd wireguard fixes, POSIX ACL fix which is preventing adm
        group from reading journals (LP: #1824342), journal dropping caches
        improvement, fixes regressions in udevadm / machinectl command line parsing.
        Files:
        - debian/patches/Add-missing-dash-to-all-option-in-the-timedatectl-man-pag.patch
        - debian/patches/Add-note-about-transactions-being-genereated-independentl.patch
        - debian/patches/Change-job-mode-of-manager-triggered-restarts-to-JOB_REPL.patch
        - debian/patches/Fix-omission-in-docs.patch
        - debian/patches/Log-the-job-being-merged.patch
        - debian/patches/NEWS-document-deprecation-of-PermissionsStartOnly-in-v240.patch
        - debian/patches/NEWS-retroactively-describe-.include-deprecation.patch
        - debian/patches/Update-systemd-system.conf.xml.patch
        - debian/patches/basic-prioq-add-prioq_peek_item.patch
        - debian/patches/core-Fix-EOPNOTSUPP-emergency-action-error-string.patch
        - debian/patches/core-Fix-return-argument-check-for-parse_emergency_action.patch
        - debian/patches/core-mount-do-not-add-Before-local-fs.target-or-remote-fs.patch
        - debian/patches/core-mount-move-static-function-earlier-in-file.patch
        - debian/patches/curl-util-fix-use-after-free.patch
        - debian/patches/ethtool-Make-sure-advertise-is-actually-set-when-autonego.patch
        - debian/patches/journal-avoid-buffer-overread-when-locale-name-is-too-lon.patch
        - debian/patches/journal-limit-the-number-of-entries-in-the-cache-based-on.patch
        - debian/patches/journald-periodically-drop-cache-for-all-dead-PIDs.patch
        - debian/patches/machinectl-fix-argument-index-in-error-log.patch
        - debian/patches/man-Fix-a-typo-in-systemd.exec.xml.patch
        - debian/patches/man-fix-reference.patch
        - debian/patches/man-fix-volume-num-of-journalctl.patch
        - debian/patches/man-update-DefaultDependency-in-systemd.mount-5.patch
        - debian/patches/netlink-set-maximum-size-of-WGDEVICE_A_IFNAME.patch
        - debian/patches/network-make-Link-and-NetDev-always-have-the-valid-poiter.patch
        - debian/patches/network-unset-Network-manager-when-loading-.network-file-.patch
        - debian/patches/network-wireguard-rename-and-split-set_wireguard_interfac.patch
        - debian/patches/networkd-wait-for-kernel-to-reply-ipv6-peer-address.patch
        - debian/patches/nspawn-ignore-SIGPIPE-for-nspawn-itself.patch
        - debian/patches/pager-improve-english-a-bit.patch
        - debian/patches/pid1-fix-cleanup-of-stale-implicit-deps-based-on-proc-sel.patch
        - debian/patches/procfs-util-expose-functionality-to-query-total-memory.patch
        - debian/patches/pull-fix-invalid-error-check.patch
        - debian/patches/shared-Revert-commit-49fe5c099-in-parts-for-function-pars.patch
        - debian/patches/shared-dissect-image-make-sure-that-we-don-t-truncate-dev.patch
        - debian/patches/test-execute-unset-HOME-before-testing.patch
        - debian/patches/udev-do-logging-before-setting-variables-to-NULL.patch
        - debian/patches/udev-val-may-be-NULL-use-strempty.patch
        - debian/patches/udevadm-info-a-should-enumerate-sysfs-attributes-not-envs.patch
        - debian/patches/udevd-use-worker_free-on-failure-in-worker_new.patch
        - debian/patches/units-make-sure-initrd-cleanup.service-terminates-before-.patch
        - debian/patches/wait-online-do-not-fail-if-we-receive-invalid-messages.patch
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=2b3db732ba7e5418d45ca42884e8d075189f2724
    
      * Only test that gdm3 comes up on amd64. Stalls on other arches.
        File: debian/tests/control
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=97cb13685dfb353045c449ec5d6d1df60f661079
    
      * tests/storage: make the test more resilient.
        Skip if the scsi_debug module is not available (like on custom kernels). Do not
        fail the tests if removing the module fail, at the end of the test run.
        File: debian/tests/storage
        https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c08dcb1ffe372acd3a21496758a1984ff78dcdd4
    
     -- Dimitri John Ledkov <email address hidden>  Thu, 11 Apr 2019 14:44:08 +0100