Fedora 27: systemd Security Update 2017-6263c938c7
Summary
systemd is a system and service manager that runs as PID 1 and starts
the rest of the system. It provides aggressive parallelization
capabilities, uses socket and D-Bus activation for starting services,
offers on-demand starting of daemons, keeps track of processes using
Linux control groups, maintains mount and automount points, and
implements an elaborate transactional dependency-based service control
logic. systemd supports SysV and LSB init scripts and works as a
replacement for sysvinit. Other parts of this package are a logging daemon,
utilities to control basic system configuration like the hostname,
date, locale, maintain a list of logged-in users and running
containers and virtual machines, system accounts, runtime directories
and settings, and daemons to manage simple network configuration,
network time synchronization, log forwarding, and name resolution.
- Use infinite timeouts for passwords during boot when JobTimeoutSec=0 - Some
tty utf8-mode fixes - Only send one auxillary fd set over dbus - Various
network-manager crash and spurious assert fixes - Do not remount network
filesystems ro during shutdown and unmount DM devices better - Fix cryptsetup
devices disappearing when used for btrfs - Fix assertions messages sometimes not
appearing during bootup/shutdown - Fix passing arguments over ssh (-H) - Fix
networks crash on MTU changes - Respect delay inhibitors in scheduled shutdowns
using logind - Send resume signal on failed sleep/shutdown from logind
(#1476313) - Make tmpfiles treat various errors more leniently and ignore autofs
paths - Load virtio_rng early - Fix cryptsetup generator usage in initramfs -Fix mounting of APIFSs using systemd-mount - Fix rfkill on some thinkpads - Fix
masking of template units - Honour quiet flag in more places - Fix crash when
removing EFI variables - Fix handling of persistent timer timestamps from the
future - Extend dbus timeouts to handle slow dbus daemon startup - Allow lines
of unlimited length in configuration files - Fix starting of units in emergency
mode - Make environment variable validation allow all shell variables - Fix
systemd-networkd issues when LinkLocalAddressing=no and DHCPServer=no - Fix
assertion triggered in timedatectl under Iranian locale - Fix systemd-resolved
DOS with crafted NSEC packets (LP#1725351) - Backport /etc/crypttab _netdev
feature from upstream (No need to reboot.)
[ 1 ] Bug #1476313 - After `systemctl mask suspend.target`, attempting to suspend switches my graphical VT session to text mode
https://bugzilla.redhat.com/show_bug.cgi?id=1476313
su -c 'dnf upgrade systemd' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
FEDORA-2017-6263c938c7 2017-11-11 13:29:22.451829 Product : Fedora 27 Version : 234 Release : 9.fc27 URL : https://www.freedesktop.org/wiki/Software/systemd/ Summary : System and Service Manager Description : systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. systemd supports SysV and LSB init scripts and works as a replacement for sysvinit. Other parts of this package are a logging daemon, utilities to control basic system configuration like the hostname, date, locale, maintain a list of logged-in users and running containers and virtual machines, system accounts, runtime directories and settings, and daemons to manage simple network configuration, network time synchronization, log forwarding, and name resolution. - Use infinite timeouts for passwords during boot when JobTimeoutSec=0 - Some tty utf8-mode fixes - Only send one auxillary fd set over dbus - Various network-manager crash and spurious assert fixes - Do not remount network filesystems ro during shutdown and unmount DM devices better - Fix cryptsetup devices disappearing when used for btrfs - Fix assertions messages sometimes not appearing during bootup/shutdown - Fix passing arguments over ssh (-H) - Fix networks crash on MTU changes - Respect delay inhibitors in scheduled shutdowns using logind - Send resume signal on failed sleep/shutdown from logind (#1476313) - Make tmpfiles treat various errors more leniently and ignore autofs paths - Load virtio_rng early - Fix cryptsetup generator usage in initramfs -Fix mounting of APIFSs using systemd-mount - Fix rfkill on some thinkpads - Fix masking of template units - Honour quiet flag in more places - Fix crash when removing EFI variables - Fix handling of persistent timer timestamps from the future - Extend dbus timeouts to handle slow dbus daemon startup - Allow lines of unlimited length in configuration files - Fix starting of units in emergency mode - Make environment variable validation allow all shell variables - Fix systemd-networkd issues when LinkLocalAddressing=no and DHCPServer=no - Fix assertion triggered in timedatectl under Iranian locale - Fix systemd-resolved DOS with crafted NSEC packets (LP#1725351) - Backport /etc/crypttab _netdev feature from upstream (No need to reboot.) [ 1 ] Bug #1476313 - After `systemctl mask suspend.target`, attempting to suspend switches my graphical VT session to text mode https://bugzilla.redhat.com/show_bug.cgi?id=1476313 su -c 'dnf upgrade systemd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Change Log
References