Backport recent fixes to v260-stable#12

Open

daan-test[bot] wants to merge 29 commits intov260-stablefrom

claude/backport-to-v260-stable

Commits on Apr 13, 2026

portablectl: fix swapped arguments for setns()

mrc0mmand
authored and
claude
committed
udev: fix bounds check in dev_if_packed_info()

mil1200
authored and
claude
committed
sd-varlink: fix a potential connection count leak

mrc0mmand
authored and
claude
committed
resolved: skip cache flush on server switch/re-probe when StaleRetentionSec is set

azureuser
authored and
claude
committed
resolved: replace assert() with error return in DNSSEC verify functions

mil1200
authored and
claude
committed
sd-bus: don't overallocate the message buffer

mrc0mmand
authored and
claude
committed
meson: Check if files returned by git ls-files actually exist

daandemeyer
authored and
claude
committed
sd-json: limit the stack depth during parsing as well

mrc0mmand
authored and
claude
committed
core: fix EBUSY on restart and clean of delegated services

naraghavan2186
authored and
claude
committed
importctl: fix -N to actually clear keep-download flag

keszybz
authored and
claude
committed
sd-event: replace dead code path with an assert

keszybz
authored and
claude
committed
po: Translated using Weblate (Arabic)

joo es
authored and
claude
committed
sd-varlink: scale down the limit of connections per UID to 128

mrc0mmand
authored and
claude
committed
uid-range: add assert to prevent underflow in coalesce loop

bluca
authored and
claude
committed
debug-generator: assert breakpoint type is valid before bit shift

bluca
authored and
claude
committed
journal: move the {DATA,ENTRY}_SIZE constants to sd-journal

mrc0mmand
authored and
claude
committed
compress: limit the output to dst_max bytes with LZ4 if set

mrc0mmand
authored and
claude
committed
journal: limit decompress_blob() output to DATA_SIZE_MAX

mrc0mmand
authored and
claude
committed
nss-systemd: fix off-by-one in nss_pack_group_record_shadow()

mil1200
authored and
claude
committed
udev/scsi-id: check for invalid chars in various fields received from the kernel

bluca
authored and
claude
committed
udev/scsi-id: check for invalid header from kernel buffer

bluca
authored and
claude
committed
udev/scsi-id: various typing refactorings

bluca
authored and
claude
committed
time-util: encode our assumption that clock_gettime() never can return 0 or USEC_INFINITY

poettering
authored and
claude
committed
docs: beef up SECURITY.md rules for reporting

bluca
authored and
claude
committed
nss-myhostname: add more INC_SAFE for buffer index accumulation

bluca
authored and
claude
committed
test-json: add iszero_safe guards for float division at index 0 and 1

bluca
authored and
claude
committed

Commits on Apr 16, 2026

fundamental: add ABS_DIFF macro

keszybz
authored and
claude
committed
homed: drop unnecessary cast to double

keszybz
authored and
claude
committed
core: use JSON_BUILD_CONST_STRING() where appropriate

poettering
authored and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Backport recent fixes to v260-stable#12

Backport recent fixes to v260-stable#12
daan-test[bot] wants to merge 29 commits intov260-stablefrom
claude/backport-to-v260-stable

Commits on Apr 13, 2026

portablectl: fix swapped arguments for setns()

udev: fix bounds check in dev_if_packed_info()

sd-varlink: fix a potential connection count leak

resolved: skip cache flush on server switch/re-probe when StaleRetentionSec is set

resolved: replace assert() with error return in DNSSEC verify functions

sd-bus: don't overallocate the message buffer

meson: Check if files returned by git ls-files actually exist

sd-json: limit the stack depth during parsing as well

core: fix EBUSY on restart and clean of delegated services

importctl: fix -N to actually clear keep-download flag

sd-event: replace dead code path with an assert

po: Translated using Weblate (Arabic)

sd-varlink: scale down the limit of connections per UID to 128

uid-range: add assert to prevent underflow in coalesce loop

debug-generator: assert breakpoint type is valid before bit shift

journal: move the {DATA,ENTRY}_SIZE constants to sd-journal

compress: limit the output to dst_max bytes with LZ4 if set

journal: limit decompress_blob() output to DATA_SIZE_MAX

nss-systemd: fix off-by-one in nss_pack_group_record_shadow()

udev/scsi-id: check for invalid chars in various fields received from the kernel

udev/scsi-id: check for invalid header from kernel buffer

udev/scsi-id: various typing refactorings

time-util: encode our assumption that clock_gettime() never can return 0 or USEC_INFINITY

docs: beef up SECURITY.md rules for reporting

nss-myhostname: add more INC_SAFE for buffer index accumulation

test-json: add iszero_safe guards for float division at index 0 and 1

Commits on Apr 16, 2026

fundamental: add ABS_DIFF macro

homed: drop unnecessary cast to double

core: use JSON_BUILD_CONST_STRING() where appropriate