Bug#929215: unblock: systemd/241-4

[Niels Thykier <niels@thykier.net>]

Control: tags -1 confirmed d-i

Michael Biebl:
> Package: release.debian.org
> Severity: normal
> User: release.debian.org@packages.debian.org
> Usertags: unblock
> 
> Please unblock package systemd
> 
> All patches are cherry-picked from upstream git.
> 
> Annotated changelog:
> 
> systemd (241-4) unstable; urgency=medium
> 
>   * journal-remote: Do not request Content-Length if Transfer-Encoding is
>     chunked (Closes: #927008)
> 
> https://salsa.debian.org/systemd-team/systemd/commit/d8e4bc4487b0f32b39b15152040351261329e92a
> 
> Without this fix, systemd-journal-remote is pretty much completely
> broken, that's why I had marked this bug RC for the
> systemd-journal-remote package
> 
> 
>   * systemctl: Restore "systemctl reboot ARG" functionality.
>     Fixes a regression introduced in v240. (Closes: #928659)
> 
> https://salsa.debian.org/systemd-team/systemd/commit/8127cbd86fadf245dd28666c1bfe82a3eb116448
> 
> 
>   * random-util: Eat up bad RDRAND values seen on AMD CPUs.
>     Some AMD CPUs return bogus data via RDRAND after a suspend/resume cycle
>     while still reporting success via the carry flag.
>     Filter out invalid data like -1 (and also 0, just to be sure).
>     (Closes: #921267)
> 
> https://salsa.debian.org/systemd-team/systemd/commit/efbcf5102f0ac7b43a2f7b8c79084fdfd2d1fa72
> 
> RDRAND is used by systemd for its hashmap implementation. On some AMD
> CPUs (AMD CPU family 22), RDRAND returns bogus data after
> suspend/resume, leading to severe mis-behaviour of systemd. Typical
> symptoms are failure to shutdown properly or when trying suspend again.
> 
> 
>   * Add check to switch VTs only between K_XLATE or K_UNICODE.
>     Switching to K_UNICODE from other than L_XLATE can make the keyboard
>     unusable and possibly leak keypresses from X.
>     (CVE-2018-20839, Closes: #929116)
> 
> https://salsa.debian.org/systemd-team/systemd/commit/5a564c6ef3906c0f3885a3a2aafce772393f760a
> 
> 
>   * Document that DRM render nodes are now owned by group "render"
>     (Closes: #926886)
> 
> https://salsa.debian.org/systemd-team/systemd/commit/e3772a013721083a740ab9dedbf060cf5b3c3709
> 
> Documentation update, which was explicitly requested for the
> video->render change of the the /dev/dri/renderD* devices.
> 
> KiBi (and debian-boot) is in CC
> 
> Full debdiff is attached.
> 
> Regards,
> Michael
> 
> unblock systemd/241-4
> 
> [...]
> 

Ok with with me.  Waiting for KiBi to give an ack from the d-i side
before I will fully unblock it.

Thanks,
~Niels