Here we rebase the patches, and fix the atrocious crime of
"name of patch file doesn't match what git format-patch generates".
We also squash down the meta patches which add the patches to the
spec file as part of good housekeeping.
We also change the systemd-config spec file to align with the
new version of systemd.
(cherry-pick of commit 0231aba5cdcb96b15106591acfff280159050366
with additional changes to systemd-config included)
Reviewed: https:/ /review. opendev. org/699884 /git.openstack. org/cgit/ starlingx/ integ/commit/ ?id=c0ef6401bf3 21335f8cc25ad3c f3ad005beb50e8
Committed: https:/
Submitter: Zuul
Branch: r/stx.2.0
commit c0ef6401bf32133 5f8cc25ad3cf3ad 005beb50e8
Author: Jim Somerville <email address hidden>
Date: Thu Nov 21 15:54:15 2019 -0500
Uprev systemd to version 219-67.el7
This solves:
systemd: line splitting via fgets() allows for state injection
during daemon-reexec (CVE-2018-15686)
along with some other less critical issues. See the security
announcement link:
https:/ /lists. centos. org/pipermail/ centos- cr-announce/ 2019-August/ 006149. html
for more details.
Here we rebase the patches, and fix the atrocious crime of
"name of patch file doesn't match what git format-patch generates".
We also squash down the meta patches which add the patches to the
spec file as part of good housekeeping.
We also change the systemd-config spec file to align with the
new version of systemd.
(cherry-pick of commit 0231aba5cdcb96b 15106591acfff28 0159050366
with additional changes to systemd-config included)
Change-Id: I950dde536c6c63 ab7c3de6ccb9f4d 07c7c08d202 /review. opendev. org/#/c/ 699875
Closes-Bug: 1849200
Depends-On: https:/
Signed-off-by: Jim Somerville <email address hidden>