From fed82f2a68a846e911212003de8c59853a0eed93 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Tue, 19 May 2026 14:11:13 +0100 Subject: [PATCH] Update NEWS --- NEWS | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index dab0ddecfc..20bd3551eb 100644 --- a/NEWS +++ b/NEWS @@ -606,7 +606,8 @@ CHANGES WITH 261 in spe: can hence only be contacted via Varlink that early. * JSON user database records may now optionally carry a birth date - field. homectl gained a new switch --birth-date= to set it. + field to close the gap with LDAP/OpenID/FreeIPA/etc. homectl gained + a new switch --birth-date= to set it. * systemd-vconsole-setup will now gracefully handle the case where the setfont/loadkeys tools are not installed, and skip operation cleanly @@ -1401,6 +1402,12 @@ CHANGES WITH 259: firstboot operation is requested. The invocation in systemd-homed-firstboot.service now turns both off by default. + * systemd-homed's fscrypt backend gained a new key sealing format that + aims to be more future-proof and robust against advances in brute + forcing techniques. Compatibiilty with the existing format is maintained, + but new enrollments will happen with the new format. Users enrolling + new systems must thus take care in not downgrading to an older version. + systemd-boot/systemd-stub: * systemd-boot now supports log levels. The level may be set via