{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":39890311,"defaultBranch":"v255-stable","name":"systemd-stable","ownerLogin":"systemd","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2015-07-29T11:40:22.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/1918868?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1718142374.0","currentOid":""},"activityList":{"items":[{"before":"2ac8041bf49be885baea0edb6562b44556a17cc2","after":"0b5a3992655735e45f78a3461a1934193d28578b","ref":"refs/heads/v255-stable","pushedAt":"2024-06-11T22:03:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"Delete CNAME","shortMessageHtmlLink":"Delete CNAME"}},{"before":"73df6cd3ee4ac88953a91cd20707f7f5b8fa7d21","after":"5c79cdec10a547a866764a66e1e14898112a00cd","ref":"refs/heads/main","pushedAt":"2024-06-11T21:46:14.000Z","pushType":"push","commitsCount":31,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"Finalize NEWS and version for v256","shortMessageHtmlLink":"Finalize NEWS and version for v256"}},{"before":"a3680a45d0356ff3ee40dcf1d697326497a3949c","after":"73df6cd3ee4ac88953a91cd20707f7f5b8fa7d21","ref":"refs/heads/main","pushedAt":"2024-06-06T19:43:22.000Z","pushType":"push","commitsCount":298,"pusher":{"login":"eworm-de","name":"Christian Hesse","path":"/eworm-de","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/970853?s=80&v=4"},"commit":{"message":"Update version and finalize NEWS for 256~rc4","shortMessageHtmlLink":"Update version and finalize NEWS for 256~rc4"}},{"before":"bf4d97f79a10992ef4421f3cbc811aa243081ea3","after":"82cd0d75b323ac51b841cb61dbb7a5e49813c73f","ref":"refs/heads/v252-stable","pushedAt":"2024-05-28T11:11:04.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"executor: check for all permission related errnos when setting up IPC namespace\n\nDenials from AppArmor are raised as EACCES, so EPERM is not enough. Do\nthe same check as PrivateNetwork above.\n\nFixes https://github.com/systemd/systemd/issues/31037\n\nRelated to 06384eb3c5044f632f50304a0210a402460f1189\n\n(cherry picked from commit cafe40ec8201db31c6d3519474ef40a72541d511)\n(cherry picked from commit e4817103d0f32a3492608f14da6628d5c9b83197)\n(cherry picked from commit da9a6a54369f9f4e700cbc5babca54d91d2ba24e)\n(cherry picked from commit 524610a3cc48795229519abd303a257979c034d9)","shortMessageHtmlLink":"executor: check for all permission related errnos when setting up IPC…"}},{"before":"8987020135bcf5e134a6fa9cf2e9f128ec8ddf61","after":"bf4d97f79a10992ef4421f3cbc811aa243081ea3","ref":"refs/heads/v252-stable","pushedAt":"2024-05-28T10:29:12.000Z","pushType":"pr_merge","commitsCount":36,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"tmpfiles: don't compare errno with negative value\n\nFollow-up for 677430b3c7fcd1b352eb66f19b8746741459b91a\n\n(cherry picked from commit d8f5a310227e7c74548b7f6ca9aafd39af6a621f)\n(cherry picked from commit 632b4934a0a0d0c048d94a3baab4668b58577a03)\n(cherry picked from commit 10e36dbd66eb96e8b1bc8e71b48c8b2a8c7635c5)\n(cherry picked from commit 6ee5aa106236add2e40b25971a6205e6bf1426a4)","shortMessageHtmlLink":"tmpfiles: don't compare errno with negative value"}},{"before":"157fecde28617dad9cfc57ce4149be925ae435ac","after":"524610a3cc48795229519abd303a257979c034d9","ref":"refs/heads/v253-stable","pushedAt":"2024-05-28T00:05:14.000Z","pushType":"pr_merge","commitsCount":41,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"executor: check for all permission related errnos when setting up IPC namespace\n\nDenials from AppArmor are raised as EACCES, so EPERM is not enough. Do\nthe same check as PrivateNetwork above.\n\nFixes https://github.com/systemd/systemd/issues/31037\n\nRelated to 06384eb3c5044f632f50304a0210a402460f1189\n\n(cherry picked from commit cafe40ec8201db31c6d3519474ef40a72541d511)\n(cherry picked from commit e4817103d0f32a3492608f14da6628d5c9b83197)\n(cherry picked from commit da9a6a54369f9f4e700cbc5babca54d91d2ba24e)","shortMessageHtmlLink":"executor: check for all permission related errnos when setting up IPC…"}},{"before":"fadc5bb7dfa36f401782405f942b655ddeb3436d","after":"da9a6a54369f9f4e700cbc5babca54d91d2ba24e","ref":"refs/heads/v254-stable","pushedAt":"2024-05-27T21:48:35.000Z","pushType":"pr_merge","commitsCount":50,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"executor: check for all permission related errnos when setting up IPC namespace\n\nDenials from AppArmor are raised as EACCES, so EPERM is not enough. Do\nthe same check as PrivateNetwork above.\n\nFixes https://github.com/systemd/systemd/issues/31037\n\nRelated to 06384eb3c5044f632f50304a0210a402460f1189\n\n(cherry picked from commit cafe40ec8201db31c6d3519474ef40a72541d511)\n(cherry picked from commit e4817103d0f32a3492608f14da6628d5c9b83197)","shortMessageHtmlLink":"executor: check for all permission related errnos when setting up IPC…"}},{"before":"e4817103d0f32a3492608f14da6628d5c9b83197","after":"2ac8041bf49be885baea0edb6562b44556a17cc2","ref":"refs/heads/v255-stable","pushedAt":"2024-05-27T15:17:51.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"packit: use Fedora 40\n\nrawhide moved to 256, so stick with F40 which uses 255","shortMessageHtmlLink":"packit: use Fedora 40"}},{"before":"41fb19e778913273d904f3b75b545bb77da9d1f7","after":"e4817103d0f32a3492608f14da6628d5c9b83197","ref":"refs/heads/v255-stable","pushedAt":"2024-05-27T13:39:50.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"executor: check for all permission related errnos when setting up IPC namespace\n\nDenials from AppArmor are raised as EACCES, so EPERM is not enough. Do\nthe same check as PrivateNetwork above.\n\nFixes https://github.com/systemd/systemd/issues/31037\n\nRelated to 06384eb3c5044f632f50304a0210a402460f1189\n\n(cherry picked from commit cafe40ec8201db31c6d3519474ef40a72541d511)","shortMessageHtmlLink":"executor: check for all permission related errnos when setting up IPC…"}},{"before":"99d69cd5e074a4a5eb77b0df1abb372f5d1ef33d","after":"1a3ee787617128264b8c1d2b4991343d2a2f06b5","ref":"refs/heads/v247-stable","pushedAt":"2024-05-27T12:59:10.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"meson: drop arch filtering in syscall list\n\nI added the filtering in 752fedbea7c02c82287c7ff2a4139f528b3f7ba8 as a way\nto reduce the number of items in the tables. I thought it's \"obvious\", but\nit might not be so.\n\nOne immediate problem is that the filter is broken, because on arm64,\nos.uname().machine returns \"aarch64\", so we incorrectly filter out the arm\nsyscalls (there is just one: arm_fadvise64_64). Of course we could fix the\nfilter, but I think it's better to nuke it altogether. The filter on applies to\n1 arm syscall and 5 s390 syscalls, and we have 500+ other syscalls, so this\n\"optimization\" doesn't really matter. OTOH, if we get the filter wrong,\nthe result is bad. And also, the existence of the filter at all creates\nproblems for cross-builds.\n\nI wanted to get rid of 'generate-syscall-list.py', but we need to generate a\nbackslash in the output. https://github.com/mesonbuild/meson/issues/1564 makes\nthis very very hard, since any attempt to put a backslash an inline argument\nresults in the backslash being replaces by a forward slash, which doesn't quite\nhave the same meaning. So let's use a standalone script until\nhttps://github.com/mesonbuild/meson/issues/1564 is resolved.\n\n(cherry picked from commit 58fcc6b013bbc8c6290348f701ddb862928cc1a0)\n(cherry picked from commit ded73e68fcbfbf82beba15a8f0280e5c010c8bde)\n(cherry picked from commit d31ac846b22dc7d1245b4df01a1868866b529447)\n(cherry picked from commit f9242887943fa2e7345f915fbfacd235d67dbed7)\n(cherry picked from commit b23b2680ff2520e760c6b0f7b285a2334a4ac1c7)","shortMessageHtmlLink":"meson: drop arch filtering in syscall list"}},{"before":"9ea76bce67408d3c14458486b2a3f33e22f1bab9","after":"41fb19e778913273d904f3b75b545bb77da9d1f7","ref":"refs/heads/v255-stable","pushedAt":"2024-05-27T07:52:27.000Z","pushType":"pr_merge","commitsCount":68,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"},"commit":{"message":"blockdev-util: \"partscan\" sysattr now directly shows the enabled state\n\nSee also: https://lore.kernel.org/r/20240502130033.1958492-3-hch@lst.de\n\n(cherry picked from commit 100bed702b73414161d57adff71e07329c1016ac)","shortMessageHtmlLink":"blockdev-util: \"partscan\" sysattr now directly shows the enabled state"}},{"before":"e7871e7bd85bc44dc3d9a5c94e4e8a7061da7630","after":"8987020135bcf5e134a6fa9cf2e9f128ec8ddf61","ref":"refs/heads/v252-stable","pushedAt":"2024-05-26T10:56:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"Revert \"tmpfiles.d/systemd: use ACL 'X' bit where appropriate\"\n\nThe feature was introduced in v254, so 'X' is not available in this branch.\n\nFixes https://github.com/systemd/systemd-stable/issues/402\n\nThis reverts commit 19904f50ac4ff786eba3fa958ab7c95e51b77d75.","shortMessageHtmlLink":"Revert \"tmpfiles.d/systemd: use ACL 'X' bit where appropriate\""}},{"before":"81acbdbc7986dc3426aa077f493d03c66d99bc5d","after":"157fecde28617dad9cfc57ce4149be925ae435ac","ref":"refs/heads/v253-stable","pushedAt":"2024-05-26T10:55:08.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"Revert \"tmpfiles.d/systemd: use ACL 'X' bit where appropriate\"\n\nThe feature was introduced in v254, so 'X' is not available in this branch.\n\nFixes https://github.com/systemd/systemd-stable/issues/402\n\nThis reverts commit 3cafb327a7f6e2beab74110440833610b8023ce3.","shortMessageHtmlLink":"Revert \"tmpfiles.d/systemd: use ACL 'X' bit where appropriate\""}},{"before":"8e57759d6d80ef772d8e17a4559a6797e09af93a","after":"9ea76bce67408d3c14458486b2a3f33e22f1bab9","ref":"refs/heads/v255-stable","pushedAt":"2024-05-23T09:25:55.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"},"commit":{"message":"docs: add specification for ELF dlopen metadata\n\nTool to parse it and to use it for Debian packaging available at\nhttps://github.com/systemd/package-notes\n\nAdd 3 levels of priority like Debian does, but using terminology\nfrom RPM as it seems more apt.\nWe will very likely never use 'required', as we use this functionality\nfor optional features, but it is worth having it in the spec nonetheless\nas we want it to be generalized.\n\n(cherry picked from commit cb7e3126b95e9be3bd722f38502d138c4d4d3eeb)","shortMessageHtmlLink":"docs: add specification for ELF dlopen metadata"}},{"before":"4ee8a954e7137cba7bf5c9d53f8d8332bcbae5c4","after":"a3680a45d0356ff3ee40dcf1d697326497a3949c","ref":"refs/heads/main","pushedAt":"2024-05-22T22:18:24.000Z","pushType":"push","commitsCount":162,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"NEWS: finalize for v256~rc3","shortMessageHtmlLink":"NEWS: finalize for v256~rc3"}},{"before":"5810c25792d4268282dd3892af1a253b690423c9","after":"8e57759d6d80ef772d8e17a4559a6797e09af93a","ref":"refs/heads/v255-stable","pushedAt":"2024-05-17T09:29:03.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"cgroup-util: allow cg_read_pid() to skip unmapped (zero) pids\n\n(cherry picked from commit 41219b4e9a71e0936ce1543bf9a3e16321f8f45c)","shortMessageHtmlLink":"cgroup-util: allow cg_read_pid() to skip unmapped (zero) pids"}},{"before":"ae68d27a7efac231eab3d8d1638ba9194836c2bb","after":"4ee8a954e7137cba7bf5c9d53f8d8332bcbae5c4","ref":"refs/heads/main","pushedAt":"2024-05-14T23:31:18.000Z","pushType":"push","commitsCount":521,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"Finalize for v256~rc2","shortMessageHtmlLink":"Finalize for v256~rc2"}},{"before":"d0af8031a15285e23ba02192d8897ff575e36245","after":"e7871e7bd85bc44dc3d9a5c94e4e8a7061da7630","ref":"refs/heads/v252-stable","pushedAt":"2024-05-09T16:47:40.000Z","pushType":"pr_merge","commitsCount":32,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"hwdb: update to main@{2024-04-08}\n\ngit restore -s origin/main hwdb.d/ test/hwdb.d\n\n(cherry picked from commit 0530cf34dee0737c627dd55a697098edaf13ca8f)\n(cherry picked from commit fadc5bb7dfa36f401782405f942b655ddeb3436d)\n(cherry picked from commit 81acbdbc7986dc3426aa077f493d03c66d99bc5d)","shortMessageHtmlLink":"hwdb: update to main@{2024-04-08}"}},{"before":"d8e9f4ccf40fff97e7dfc3dbacb6ea42bdba551e","after":"81acbdbc7986dc3426aa077f493d03c66d99bc5d","ref":"refs/heads/v253-stable","pushedAt":"2024-05-09T15:44:13.000Z","pushType":"pr_merge","commitsCount":31,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"hwdb: update to main@{2024-04-08}\n\ngit restore -s origin/main hwdb.d/ test/hwdb.d\n\n(cherry picked from commit 0530cf34dee0737c627dd55a697098edaf13ca8f)\n(cherry picked from commit fadc5bb7dfa36f401782405f942b655ddeb3436d)","shortMessageHtmlLink":"hwdb: update to main@{2024-04-08}"}},{"before":"cf84d7fc3e65523d2187c0ba68a61ac64802f4a2","after":"fadc5bb7dfa36f401782405f942b655ddeb3436d","ref":"refs/heads/v254-stable","pushedAt":"2024-05-09T14:39:34.000Z","pushType":"pr_merge","commitsCount":38,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"hwdb: update to main@{2024-04-08}\n\ngit restore -s origin/main hwdb.d/ test/hwdb.d\n\n(cherry picked from commit 0530cf34dee0737c627dd55a697098edaf13ca8f)","shortMessageHtmlLink":"hwdb: update to main@{2024-04-08}"}},{"before":"5810c25792d4268282dd3892af1a253b690423c9","after":null,"ref":"refs/heads/v255-stable-batch","pushedAt":"2024-05-09T10:23:15.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"}},{"before":"0530cf34dee0737c627dd55a697098edaf13ca8f","after":"5810c25792d4268282dd3892af1a253b690423c9","ref":"refs/heads/v255-stable","pushedAt":"2024-05-09T10:23:09.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"},"commit":{"message":"logind: Add fallback for when the PIDFDs= property is not available\n\nlogind is not zero-downtime restartable yet, specifically it's not yet\nrestarted in the Fedora spec, so we can end up in situations where we're\nrunning newer logind with older pid1 which doesn't know about the PIDFDs=\nproperty, so let's make sure we have a fallback in place for when that\nhappens.\n\n(cherry picked from commit 8ba3efed8669639457fc9b482d61d87e77f79b33)","shortMessageHtmlLink":"logind: Add fallback for when the PIDFDs= property is not available"}},{"before":null,"after":"5810c25792d4268282dd3892af1a253b690423c9","ref":"refs/heads/v255-stable-batch","pushedAt":"2024-05-09T08:08:02.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"},"commit":{"message":"logind: Add fallback for when the PIDFDs= property is not available\n\nlogind is not zero-downtime restartable yet, specifically it's not yet\nrestarted in the Fedora spec, so we can end up in situations where we're\nrunning newer logind with older pid1 which doesn't know about the PIDFDs=\nproperty, so let's make sure we have a fallback in place for when that\nhappens.\n\n(cherry picked from commit 8ba3efed8669639457fc9b482d61d87e77f79b33)","shortMessageHtmlLink":"logind: Add fallback for when the PIDFDs= property is not available"}},{"before":"0530cf34dee0737c627dd55a697098edaf13ca8f","after":null,"ref":"refs/heads/v255-stable-batch","pushedAt":"2024-05-09T08:07:52.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"}},{"before":"a1580223a5dd67ab61c5f888b114de43b65fffbf","after":"0530cf34dee0737c627dd55a697098edaf13ca8f","ref":"refs/heads/v255-stable","pushedAt":"2024-05-09T08:07:46.000Z","pushType":"push","commitsCount":46,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"},"commit":{"message":"hwdb: update to main@{2024-04-08}\n\ngit restore -s origin/main hwdb.d/ test/hwdb.d","shortMessageHtmlLink":"hwdb: update to main@{2024-04-08}"}},{"before":null,"after":"0530cf34dee0737c627dd55a697098edaf13ca8f","ref":"refs/heads/v255-stable-batch","pushedAt":"2024-05-08T13:22:11.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"keszybz","name":"Zbigniew Jędrzejewski-Szmek","path":"/keszybz","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/349618?s=80&v=4"},"commit":{"message":"hwdb: update to main@{2024-04-08}\n\ngit restore -s origin/main hwdb.d/ test/hwdb.d","shortMessageHtmlLink":"hwdb: update to main@{2024-04-08}"}},{"before":"374b2aaa7b5859856a08ea5210437d73058c308a","after":"d8e9f4ccf40fff97e7dfc3dbacb6ea42bdba551e","ref":"refs/heads/v253-stable","pushedAt":"2024-05-08T11:31:41.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"core/varlink: make sure we setup non-serialized varlink sockets\n\nBefore this PR, if m->varlink_server is not yet set up during\ndeserialization, we call manager_setup_varlink_server rather than\nmanager_varlink_init, the former of which doesn't setup varlink\naddresses, but only binds to methods. This results in that\nnewly-added varlink addresses not getting created if deserialization\ntakes place.\n\nTherefore, let's switch to manager_varlink_init, and add some\nsanity checks to it in order to prevent listening on the same\naddress twice.\n\nFixes #29373\n\nReplaces #29421\n\n(cherry picked from commit 6906c028e83b77b35eaaf87b27d0fe5c6e1984b7)\n(cherry picked from commit cf84d7fc3e65523d2187c0ba68a61ac64802f4a2)","shortMessageHtmlLink":"core/varlink: make sure we setup non-serialized varlink sockets"}},{"before":"6e992086aa45d403ab052c3030020c437e88c01b","after":"cf84d7fc3e65523d2187c0ba68a61ac64802f4a2","ref":"refs/heads/v254-stable","pushedAt":"2024-05-07T21:09:05.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"core/varlink: make sure we setup non-serialized varlink sockets\n\nBefore this PR, if m->varlink_server is not yet set up during\ndeserialization, we call manager_setup_varlink_server rather than\nmanager_varlink_init, the former of which doesn't setup varlink\naddresses, but only binds to methods. This results in that\nnewly-added varlink addresses not getting created if deserialization\ntakes place.\n\nTherefore, let's switch to manager_varlink_init, and add some\nsanity checks to it in order to prevent listening on the same\naddress twice.\n\nFixes #29373\n\nReplaces #29421\n\n(cherry picked from commit 6906c028e83b77b35eaaf87b27d0fe5c6e1984b7)","shortMessageHtmlLink":"core/varlink: make sure we setup non-serialized varlink sockets"}},{"before":"52c17febf14c866d9808d1804f13ac98d76e665b","after":"a1580223a5dd67ab61c5f888b114de43b65fffbf","ref":"refs/heads/v255-stable","pushedAt":"2024-05-02T08:39:42.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"resolved: validate authentic insecure delegation to CNAME\n\nIf the parent zone uses a non-opt-out method that provides authenticated\nnegative DS replies, we still can't expect signatures from the child\nzone. sd-resolved was using the authenticated status of the DS reply to\nrequire signatures for CNAMEs, even though it had already proved that no\nsignature exists.\n\nFixes: 47690634f157 (\"resolved: don't request the SOA for every dns label\")\n(cherry picked from commit 414a9b8e5e1e772261b0ffaedc853f5c0aba5719)","shortMessageHtmlLink":"resolved: validate authentic insecure delegation to CNAME"}},{"before":"8f4dab049074d31c31af2bb9eb76f9f4f08e3711","after":"52c17febf14c866d9808d1804f13ac98d76e665b","ref":"refs/heads/v255-stable","pushedAt":"2024-04-29T23:17:55.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"bluca","name":"Luca Boccassi","path":"/bluca","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/782193?s=80&v=4"},"commit":{"message":"resolved: always progress DS queries\n\nIf we request a DS and the resolver offers an unsigned SOA, a new\nauxiliary transaction for the DS will be rejected as a loop, and we\nmight not make any progress toward finding the DS we need. Let's ensure\nthat we at least always check the parent in this case.\n\nFixes: 47690634f157 (\"resolved: don't request the SOA for every dns label\")\n(cherry picked from commit d840783db5208219c78d73b9b46ef5daae9fea0a)","shortMessageHtmlLink":"resolved: always progress DS queries"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEYrICywA","startCursor":null,"endCursor":null}},"title":"Activity · systemd/systemd-stable"}