Commit Graph

Select branches

Hide Pull Requests

main-with-ancient-kernel

v262.1-with-ancient-kernel

v262

Mono Color

• 90acfb3dab journal: Tolerate lost tail hash chain nodes Chris Down 2026-06-18 16:07:04 +09:00
• 7662ceddd1 journal: Recover filtered journal queries after crash truncated writes Chris Down 2026-06-17 19:45:11 +08:00
• 94d49182a0 journal-remote: fix hostname double-free on request_meta() error paths Luca Boccassi 2026-06-24 13:41:06 +01:00
• f8891704d3 journal-gatewayd: fix signed overflow in n_skip handling Luca Boccassi 2026-06-24 13:39:33 +01:00
• 45f561bf12 mkosi: update mkosi ref to f7762b71437227922a367bb89597843c77494ef9 Luca Boccassi 2026-06-25 09:26:23 +01:00
• 39863e2b1e homectl: retry DeactivateHome on transient busy errors Luca Boccassi 2026-05-08 14:21:33 +01:00
• 80c92c896a shared/tpm2-util: use a define instead of a const static variable Zbigniew Jędrzejewski-Szmek 2026-06-25 10:59:28 +02:00
• b14acfdab1 Fix: core fixes (#42744) Zbigniew Jędrzejewski-Szmek 2026-06-25 14:39:53 +02:00
• 3498b84013 Couple of hardening changes for utils flagged by kres (#42732) Zbigniew Jędrzejewski-Szmek 2026-06-25 14:31:35 +02:00
• e3ebdb8ec5 tpm2: re-manufacture software TPM when state dir is incomplete Paul Meyer 2026-06-23 16:07:34 +02:00
• abf96165a6 tpm2: write swtpm config files atomically via the state directory fd Paul Meyer 2026-06-24 08:58:10 +02:00
• 47b6a20621 fileio: add write_string_filef_at() Paul Meyer 2026-06-25 13:27:21 +02:00
• e4000c0dbf Translations update from Fedora Weblate (#42749) Luca Boccassi 2026-06-25 12:16:52 +01:00
• 14b1a92eb2 unit-name: introduce "strict" mode for unit name mangling Frantisek Sumsal 2026-06-17 14:09:43 +02:00
• a0a57873bd po: Translated using Weblate (Spanish) Fco. Javier F. Serrador 2026-06-25 10:17:55 +00:00
• 11160d967f po: Translated using Weblate (Romanian) Weblate Translation Memory 2026-06-25 10:17:55 +00:00
• 77f7c7ef8c po: Translated using Weblate (Romanian) Petru Rebeja 2026-06-25 10:17:54 +00:00
• 364bc151db machined: allow privileged users to register other users machines (#39042) Luca Boccassi 2026-06-25 10:53:04 +01:00
• 6815a48f08 machined: allow privileged users to register other users machines Luca Boccassi 2025-09-20 00:49:42 +01:00
• 5ce1786227 polkit: check if user authenticated as admin Luca Boccassi 2025-09-20 00:49:00 +01:00
• 087b0ebb61 units: harden systemd-report-sign-plain@.service Paul Meyer 2026-06-24 12:43:40 +02:00
• 15bee24d4f journald: bound field length in extra-fields reader Syed Mohammed Nayyar 2026-06-24 18:29:35 +05:30
• 89f1f76624 unit-name: use FLAGS_SET() more Frantisek Sumsal 2026-06-17 14:09:19 +02:00
• d30e87ea49 uid-range: fix out-of-bounds write in uid_range_partition() Luca BoccassiandPaul Meyer 2026-06-24 13:56:37 +01:00
• a0343dabfa core: derive restrict-fsaccess initramfs_s_dev offset from skeleton (#42705) Zbigniew Jędrzejewski-Szmek 2026-06-25 11:24:28 +02:00
• f98629421b dhcp6: reject IA_PD_PREFIX with invalid prefix length Luca Boccassi 2026-06-24 13:20:56 +01:00
• a762c92a7c sd-lldp-rx: keep object ref around event callbacks Luca Boccassi 2026-06-24 13:53:07 +01:00
• 68b59ca74f systemctl: fix continue placement in clean-or-freeze error handling dongshengyuan 2026-06-25 16:40:28 +08:00
• bc4dfc24a5 basic: add assert() when doing pointer deref Michael Vogt 2026-06-23 17:34:18 +02:00
• 3daf3e19da core: fix fd leak in exec_shared_runtime_deserialize_one dongshengyuan 2026-06-25 16:40:05 +08:00
• cd346b8ba7 Assorted coverity fixes (#42738) Lennart Poettering 2026-06-25 10:29:57 +02:00
• 32165a1a48 network: roll back ipv6ll_address on link_ipv6ll_gained() failure dongshengyuan 2026-06-25 16:19:14 +08:00
• da0252110c sysupdate: propagate transfer_instance_vacuum() errors dongshengyuan 2026-06-25 16:16:40 +08:00
• a9e8f89592 sd-journal: fix memzero size in data hash table setup dongshengyuan 2026-06-25 16:01:42 +08:00
• 2f1c3b8afb units: harden systemd-tpm2-swtpm.service Paul Meyer 2026-06-17 18:03:55 +02:00
• df2baac2b9 tpm2: stop the software TPM before the ESP is unmounted on shutdown Paul Meyer 2026-06-23 14:46:24 +02:00
• 1b1900a6f3 test: add TEST-92-TPM2-SWTPM for the software TPM fallback Paul Meyer 2026-06-23 14:40:51 +02:00
• 45033e39ec sd-future: drop redundant branch in test reader fiber Luca Boccassi 2026-06-24 19:09:36 +01:00
• 6ebf344a1b core: actually sort the parsed LUO session list Luca Boccassi 2026-06-24 19:07:56 +01:00
• 2e79d397a4 dhcp-message-dump: guard against negative option type before indexing Luca Boccassi 2026-06-24 19:02:06 +01:00
• 1f9d56a7ab hostname-setup: avoid O(N^2) string building in wildcard substitution Luca Boccassi 2026-06-24 12:24:37 +01:00
• a6e2bfe533 resolved: fix potential use-after-free when freeing DNS extra stub listeners Luca Boccassi 2026-06-24 13:43:14 +01:00
• 218ac81f85 resolved: avoid dangling hashmap entry on RegisterService failure Luca Boccassi 2026-06-24 13:54:05 +01:00
• 84f6da603e sysupdate: do a varlink callout to a ready when completing an update, and hook bootctl install, pcrlock and sysext refresh into it (#42365) Lennart Poettering 2026-06-24 16:58:45 +02:00
• b48228a559 hwdb: map Brazilian ThinkPad T14 Gen 1 slash key to KEY_RO LucasTavaresA 2026-06-24 09:21:29 -03:00
• f66144cf2a string-util: check for short input in previous_ansi_sequence() Luca Boccassi 2026-06-24 13:46:04 +01:00
• 01f3f2aa2f TODO: drop bootctl link + sysupdate integration item Lennart Poettering 2026-05-28 11:42:57 +02:00
• 9ac1b6c124 test: verify bootctl link-auto and io.systemd.BootControl.LinkAuto Lennart Poettering 2026-05-28 12:20:59 +02:00
• 89dd06505b test: verify sysupdate invokes the notification callout directory Lennart Poettering 2026-05-28 11:42:57 +02:00
• be1643b549 systemd-boot-update: condition on UEFI Lennart Poettering 2026-05-29 15:40:45 +02:00
• 942283288d sysext: refresh sysexts and confexts on completed system update Lennart Poettering 2026-05-28 11:42:47 +02:00
• 1421e6c5f4 bootctl: add link-auto/LinkAuto and auto-link on completed system update Lennart Poettering 2026-05-28 11:42:21 +02:00
• 27b7fb9b20 pcrlock: recompute PCR policy on completed system update Lennart Poettering 2026-05-28 11:41:45 +02:00
• d36bdc9467 sysupdate: notify hook subscribers after a successful update Lennart Poettering 2026-05-28 11:40:42 +02:00
• 95a372a514 vpick: take separate root_fd and dir_fd arguments Lennart Poettering 2026-05-28 12:37:39 +02:00
• 236bade19c man: document SEV-SNP credential delivery via initrd cpio Paul Meyer 2026-05-23 17:37:40 +02:00
• 76b62b0435 vmspawn: deliver credentials via initrd cpio under SEV-SNP Paul Meyer 2026-05-23 17:05:56 +02:00
• 62fde7bc06 shared: add userspace cpio writer for credentials Paul Meyer 2026-05-23 16:25:55 +02:00
• 9e7b8b734f core: import trusted initrd credentials Paul Meyer 2026-06-03 13:23:27 +02:00
• 8168aca9fb units: tag more units correctly with varlink xattrs Lennart Poettering 2026-06-24 08:24:05 +02:00
• bb025e38cc sysupdate: automatically clean up orphaned files after auto-update (#42714) Lennart Poettering 2026-06-24 12:29:50 +02:00
• 72984e30b4 po: Translated using Weblate (Romanian) Petru Rebeja 2026-06-24 08:17:54 +00:00
• 5bd7cc7a6b sysupdate: automatically clean up orphaned files after auto-update Lennart Poettering 2026-06-23 21:15:53 +02:00
• 1dcd2966a0 test-execute: use per-Exec timeout instead of per-service timeout Luca Boccassi 2026-06-23 10:39:01 +01:00
• 55fb3fcf99 core: pin restrict-fsaccess initramfs_s_dev store width to skeleton field tunaichao 2026-06-24 14:01:06 +08:00
• 2e44ad8dbd core: derive restrict-fsaccess initramfs_s_dev offset from skeleton tunaichao 2026-06-23 15:45:49 +08:00
• 9797d8fae3 sd-varlink: mark varlink sockets via xattrs (#42454) Lennart Poettering 2026-06-24 06:16:39 +02:00
• 926bf65359 test: skip fdstore tests if test-fdstore is not available Frantisek Sumsal 2026-06-23 21:29:53 +02:00
• b0688a6f5e update TODO Lennart Poettering 2026-06-03 11:12:22 +02:00
• 627655b2c0 man: document sd_varlink_server_listen_address() and friends Lennart Poettering 2026-06-03 15:30:56 +02:00
• 941a9ff40c tree-wide: relax access mode of private Varlink sockets a bit Lennart Poettering 2026-06-03 12:10:49 +02:00
• 53fc4c48e7 units: tag all .varlink sockets with the right xattrs Lennart Poettering 2026-06-03 08:37:03 +02:00
• 52e6c185df varlinkctl: add 'list-sockets' verb Lennart Poettering 2026-06-02 18:53:07 +02:00
• daae289f10 sd-netlink: beef up sock-diag code a bit Lennart Poettering 2026-06-02 18:52:00 +02:00
• ce72c94acc bpf-restrict-fsaccess: move STAT_DEV_TO_KERNEL into generic code Lennart Poettering 2026-06-02 18:51:13 +02:00
• cc174775f5 core: add socket xattr settings for socket unit Lennart Poettering 2026-06-02 18:22:50 +02:00
• ce97f9f6e0 varlinkctl: port to new help-util.[ch] apis Lennart Poettering 2026-06-02 17:49:00 +02:00
• 96a37e3493 sd-varlink: mark varlink sockets and entrypoint inodes as varlink via xattrs Lennart Poettering 2026-06-02 17:36:52 +02:00
• f304250315 socket-util: add new helper socket_xattr_supported() Lennart Poettering 2026-06-03 11:06:23 +02:00
• e1bdd512ed xattr-util: use empty_to_null() where appropriate Lennart Poettering 2026-06-02 17:35:49 +02:00
• 1e8d527f68 confidential-virt: fixes to detection and reporting (#42697) Lennart Poettering 2026-06-23 19:11:38 +02:00
• a7aa25bb25 tpm2-setup: call DLOPEN_TPM2 to add dependency and fail immediately if not present Luca Boccassi 2026-06-22 22:48:53 +01:00
• c58fdad838 journal: expose last 10 high priority logs as metrics (#42621) Lennart Poettering 2026-06-23 18:36:12 +02:00
• 7a713418be core: fix assertion when inactive unit pulled in by try-restart and start at the same time Luca Boccassi 2026-06-23 11:45:11 +01:00
• 70d2064c91 various measurement-related fixes (#42698) Lennart Poettering 2026-06-23 18:35:11 +02:00
• 6e39099a4a growfs: downgrade dependency on libcryptsetup to optional Luca Boccassi 2026-06-23 00:04:41 +01:00
• 9d2673924b confidential-virt: fix comment regarding vmm.c location Paul Meyer 2026-06-23 12:43:00 +02:00
• 6981edbb77 TODO: remove "10 most recent emergency message as metrics" todo Michael Vogt 2026-06-23 12:39:22 +02:00
• b436be5938 journal: expose last 10 high priority logs as metrics Michael Vogt 2026-06-16 16:20:10 +02:00
• f05336401a shared: add OUTPUT_SKIP_UNPRINTABLE to log-show Michael Vogt 2026-06-22 15:07:21 +02:00
• 6b395fd44b metrics: add METRIC_FAMILY_TYPE_OBJECT type Michael Vogt 2026-06-22 07:40:34 +02:00
• 7c433f3945 boot: read the TDX CPUID leaf unconditionally Paul Meyer 2026-06-23 12:34:12 +02:00
• fb1bdb9eff confidential-virt: read the TDX CPUID leaf unconditionally Paul Meyer 2026-06-18 07:44:09 +02:00
• d76ce200a6 confidential-virt: treat an unreadable SEV MSR as confidential Paul Meyer 2026-06-17 16:13:35 +02:00
• e514dadd1c pcrextend: refuse empty measurement over Varlink Paul Meyer 2026-06-17 18:03:55 +02:00
• 662e02a5f8 tpm2-util: refuse NvPCR extend when the NV index is gone Paul Meyer 2026-06-17 17:40:18 +02:00
• 78a5271245 imds: expose imds info fields also as metrics (#42409) Lennart Poettering 2026-06-22 23:22:41 +02:00
• 7e045f9c39 report: add systemd-report-sign-tsm backend (#42683) Lennart Poettering 2026-06-22 23:02:58 +02:00
• 32a162dbb9 core: add method to enqueue multiple jobs in a single call (#42182) Luca Boccassi 2026-06-22 21:35:17 +01:00
• 7034441827 test: add coverage for multi-unit transactions Luca Boccassi 2026-05-19 18:43:57 +01:00