<div class="container">
<h1>Recommended update for systemd</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-RU-2024:2641-1</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">Basesystem Module 15-SP6</li>
<li class="list-group-item">openSUSE Leap 15.6</li>
<li class="list-group-item">SUSE Linux Enterprise Desktop 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Real Time 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server 15 SP6</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP Applications 15 SP6</li>
<li class="list-group-item">SUSE Package Hub 15 15-SP6</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that can now be installed.</p>
<h2>Description:</h2>
<p>This update for systemd fixes the following issues:</p>
<p>systemd was updated from version 254.13 to version 254.15:</p>
<ul>
<li>
<p>Changes in version 254.15:</p>
</li>
<li>
<p>boot: cover for hardware keys on phones/tablets</p>
</li>
<li>Conditional PSI check to reflect changes done in 5.13</li>
<li>core/dbus-manager: refuse SoftReboot() for user managers</li>
<li>core/exec-invoke: reopen OpenFile= fds with O_NOCTTY</li>
<li>core/exec-invoke: use sched_setattr instead of sched_setscheduler</li>
<li>core/unit: follow merged units before updating SourcePath= timestamp too</li>
<li>coredump: correctly take tmpfs size into account for compression</li>
<li>cryptsetup: improve TPM2 blob display</li>
<li>docs: Add section to HACKING.md on distribution packages</li>
<li>docs: fixed dead link to GNOME documentation</li>
<li>docs/CODING_STYLE: document that we nowadays prefer (const char*) for func ret type</li>
<li>Fixed typo in CAP_BPF description</li>
<li>LICENSES/README: expand text to summarize state for binaries and libs</li>
<li>man: fully adopt ~/.local/state/</li>
<li>man/systemd.exec: list inaccessible files for ProtectKernelTunables</li>
<li>man/tmpfiles: remove outdated behavior regarding symlink ownership</li>
<li>meson: bpf: propagate 'sysroot' for cross compilation</li>
<li>meson: Define __TARGET_ARCH macros required by bpf</li>
<li>mkfs-util: Set sector size for btrfs as well</li>
<li>mkosi: drop CentOS 8 from CI</li>
<li>mkosi: Enable hyperscale-packages-experimental for CentOS</li>
<li>mountpoint-util: do not assume symlinks are not mountpoints</li>
<li>os-util: avoid matching on the wrong extension-release file</li>
<li>README: add missing CONFIG_MEMCG kernel config option for oomd</li>
<li>README: update requirements for signed dm-verity</li>
<li>resolved: allow the full TTL to be used by OPT records</li>
<li>resolved: correct parsing of OPT extended RCODEs</li>
<li>sysusers: handle NSS errors gracefully</li>
<li>TEST-58-REPART: reverse order of diff args</li>
<li>TEST-64-UDEV-STORAGE: Make nvme_subsystem expected pci symlinks more generic</li>
<li>test: fixed TEST-24-CRYPTSETUP on SUSE</li>
<li>test: install /etc/hosts</li>
<li>Use consistent spelling of systemd.condition_first_boot argument</li>
<li>util: make file_read() 64bit offset safe</li>
<li>
<p>vmm: make sure we can handle smbios objects without variable part</p>
</li>
<li>
<p>Changes in version 254.14:</p>
</li>
<li>
<p>analyze: show pcrs also in sha384 bank</p>
</li>
<li>chase: Tighten "." and "./" check</li>
<li>core/service: fixed accept-socket deserialization</li>
<li>efi-api: check /sys/class/tpm/tpm0/tpm_version_major, too</li>
<li>executor: check for all permission related errnos when setting up IPC namespace</li>
<li>install: allow removing symlinks even for units that are gone</li>
<li>json: use secure un{base64,hex}mem for sensitive variants</li>
<li>man,units: drop "temporary" from description of systemd-tmpfiles</li>
<li>missing_loop.h: fixed LOOP_SET_STATUS_SETTABLE_FLAGS</li>
<li>repart: fixed memory leak</li>
<li>repart: Use CRYPT_ACTIVATE_PRIVATE</li>
<li>resolved: permit dnssec rrtype questions when we aren't validating</li>
<li>rules: Limit the number of device units generated for serial ttys</li>
<li>run: do not pass the pty slave fd to transient service in a machine</li>
<li>sd-dhcp-server: clear buffer before receive</li>
<li>strbuf: use GREEDY_REALLOC to grow the buffer</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
openSUSE Leap 15.6
<br/>
<code>zypper in -t patch openSUSE-SLE-15.6-2024-2641=1 SUSE-2024-2641=1</code>
</li>
<li class="list-group-item">
Basesystem Module 15-SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-2641=1</code>
</li>
<li class="list-group-item">
SUSE Package Hub 15 15-SP6
<br/>
<code>zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-2641=1</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
<ul>
<li>udev-mini-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-coredump-254.15-150600.4.8.1</li>
<li>libsystemd0-mini-254.15-150600.4.8.1</li>
<li>systemd-portable-254.15-150600.4.8.1</li>
<li>udev-mini-254.15-150600.4.8.1</li>
<li>libudev1-254.15-150600.4.8.1</li>
<li>libsystemd0-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-mini-container-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-container-254.15-150600.4.8.1</li>
<li>systemd-homed-254.15-150600.4.8.1</li>
<li>libudev1-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-mini-debuginfo-254.15-150600.4.8.1</li>
<li>udev-254.15-150600.4.8.1</li>
<li>libsystemd0-mini-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-journal-remote-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-doc-254.15-150600.4.8.1</li>
<li>systemd-journal-remote-254.15-150600.4.8.1</li>
<li>systemd-network-254.15-150600.4.8.1</li>
<li>systemd-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-homed-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-container-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-mini-debugsource-254.15-150600.4.8.1</li>
<li>systemd-254.15-150600.4.8.1</li>
<li>systemd-coredump-debuginfo-254.15-150600.4.8.1</li>
<li>libudev-mini1-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-mini-254.15-150600.4.8.1</li>
<li>systemd-devel-254.15-150600.4.8.1</li>
<li>systemd-network-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-sysvcompat-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-experimental-254.15-150600.4.8.1</li>
<li>systemd-sysvcompat-254.15-150600.4.8.1</li>
<li>systemd-experimental-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-testsuite-debuginfo-254.15-150600.4.8.1</li>
<li>udev-debuginfo-254.15-150600.4.8.1</li>
<li>libsystemd0-254.15-150600.4.8.1</li>
<li>systemd-portable-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-mini-container-254.15-150600.4.8.1</li>
<li>libudev-mini1-254.15-150600.4.8.1</li>
<li>systemd-debugsource-254.15-150600.4.8.1</li>
<li>systemd-testsuite-254.15-150600.4.8.1</li>
<li>systemd-mini-devel-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.6 (x86_64)
<ul>
<li>systemd-32bit-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-32bit-254.15-150600.4.8.1</li>
<li>libudev1-32bit-debuginfo-254.15-150600.4.8.1</li>
<li>libsystemd0-32bit-254.15-150600.4.8.1</li>
<li>libsystemd0-32bit-debuginfo-254.15-150600.4.8.1</li>
<li>libudev1-32bit-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.6 (aarch64 x86_64 i586)
<ul>
<li>systemd-boot-254.15-150600.4.8.1</li>
<li>systemd-boot-debuginfo-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.6 (noarch)
<ul>
<li>systemd-lang-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
openSUSE Leap 15.6 (aarch64_ilp32)
<ul>
<li>systemd-64bit-debuginfo-254.15-150600.4.8.1</li>
<li>libudev1-64bit-254.15-150600.4.8.1</li>
<li>libsystemd0-64bit-254.15-150600.4.8.1</li>
<li>libudev1-64bit-debuginfo-254.15-150600.4.8.1</li>
<li>libsystemd0-64bit-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-64bit-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64)
<ul>
<li>udev-debuginfo-254.15-150600.4.8.1</li>
<li>libsystemd0-254.15-150600.4.8.1</li>
<li>systemd-254.15-150600.4.8.1</li>
<li>systemd-coredump-254.15-150600.4.8.1</li>
<li>systemd-doc-254.15-150600.4.8.1</li>
<li>systemd-coredump-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-debuginfo-254.15-150600.4.8.1</li>
<li>libudev1-254.15-150600.4.8.1</li>
<li>libsystemd0-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-container-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-devel-254.15-150600.4.8.1</li>
<li>systemd-sysvcompat-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-container-254.15-150600.4.8.1</li>
<li>systemd-debugsource-254.15-150600.4.8.1</li>
<li>libudev1-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-sysvcompat-254.15-150600.4.8.1</li>
<li>udev-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP6 (noarch)
<ul>
<li>systemd-lang-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
Basesystem Module 15-SP6 (x86_64)
<ul>
<li>systemd-32bit-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-32bit-254.15-150600.4.8.1</li>
<li>libudev1-32bit-debuginfo-254.15-150600.4.8.1</li>
<li>libsystemd0-32bit-254.15-150600.4.8.1</li>
<li>libsystemd0-32bit-debuginfo-254.15-150600.4.8.1</li>
<li>libudev1-32bit-254.15-150600.4.8.1</li>
</ul>
</li>
<li>
SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64)
<ul>
<li>systemd-network-debuginfo-254.15-150600.4.8.1</li>
<li>systemd-network-254.15-150600.4.8.1</li>
<li>systemd-debugsource-254.15-150600.4.8.1</li>
<li>systemd-debuginfo-254.15-150600.4.8.1</li>
</ul>
</li>
</ul>
</div>