Moderate: systemd security update (Oracle Linux 10)

[257-23.0.1.el10_2.1]
- Fix detection of Oracle Virtualization or BM envs [Orabug: 37531877]
- Avoid udevadm warnings when using udev valid configs [Orabug: 37503197]
- allow dm remove ioctl to co-operate with UEK3 [Orabug: 18467469]
- set 'RemoveIPC=no' in logind.conf as default [Orabug: 22224874]
- Fix missing netdev for iscsi entry in fstab [Orabug: 25897792]
- udev rules: fix memory hot add and remove [Orabug: 31310273]
- Disable unprivileged BPF by default [Orabug: 32870980]
- Remove upstream references [Orabug: 33995357]
- Wait for an extra configurable time before udevd kills a worker [Orabug: 36017407]
- Removed unneeded patches from the systemd.spec
- 1004-orabug34272490-0001-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switchin.patch [Orabug: 34272490]
- 1005-orabug34272490-0002-core-device-drop-unnecessary-condition.patch [Orabug: 34272490]
- 1006-orabug34467234-shutdown-get-only-active-md-arrays.patch [Orabug: 34467234]
- 1007-orabug34868110-pstore-fixes-for-dmesg.txt-reconstruction.patch [Orabug: 34868110]
- 1008-path-drop-IN_ATTRIB-from-parent-directory-watches.patch [Orabug: 36780432]

[257-23.1]
- ci: re-enable bpf-framework option for build and unit test jobs (RHEL-152080)
- ci: add bpftool workaround to codeql job too (RHEL-152080)
- ci: fix workaround about bpftool for codeql (RHEL-152080)
- ci: add bpftool workaround to coverity too (RHEL-152080)
- path-util: add flavour of path_startswith() that leaves a leading slash in place (RHEL-152080)
- cgroup: port some code over to path_startswith_full() (RHEL-152080)
- path-util: invert PATH_STARTSWITH_ACCEPT_DOT_DOT flag (RHEL-152080)
- sd-json: fix off-by-one issue when updating parent for array elements (RHEL-152080)
- core/cgroup: avoid one unnecessary strjoina() (RHEL-152080)
- core: validate input cgroup path more prudently (RHEL-152080)

[257-23]
- test-journal-dump: dump the headers of journal files (RHEL-106795)
- journal: store counts, not byte sizes, in table size constants (RHEL-106795)
- journal: treble field hash table size (RHEL-106795)
- nspawn: move uid shift/chown() code into shared/ (RHEL-143036)
- user-classification: add new 'foreign' UID range (RHEL-143036)
- userdb: synthesize stub user records for the foreign UID (RHEL-143036)
- dissect: add new --shift command (RHEL-143036)
- userdb: optionally parse numeric UIDs/GIDs where a username is expected (RHEL-143036)
- userdbd: separate parameter structure of GetMemberships() varlink call from the GetUserRecord() one (RHEL-143036)
- userdb: move setting of 'service' varlink parameter into userdb_connect() (RHEL-143036)
- user-record: make a NULL UserDBMatch be equivalent to no filtering (RHEL-143036)
- sd-varlink: add sd_varlink_get_description() call (RHEL-143036)
- user-record: add helper for dispatching a disposition mask (RHEL-143036)
- user-record: rename USER_DISPOSITION_MASK_MAX -> USER_DISPOSITION_MASK_ALL (RHEL-143036)
- user-record: add some helpers for working with UserDBMatch (RHEL-143036)
- varlink: add new calls for server-side user record filtering to varlink IDL + to spec (RHEL-143036)
- userdb: move UserDBMatch handling from userdbctl into generic userdb code to allow it to be done server side (RHEL-143036)
- userdbd: implement server side filtering in the Multiplexer API (RHEL-143036)
- homectl: port has_regular_user() + acquire_group_list() to use server-side filtering (RHEL-143036)
- update TODO (RHEL-143036)
- JSON User/Group records: Add properties for UUIDs (RHEL-143036)
- userdb: add support for printing the UUID from user and group records (RHEL-143036)
- userdb: add support for looking up users or groups by uuid. (RHEL-143036)
- userdbctl: add --uuid filtering option (RHEL-143036)
- userdbctl: add missing --uuid= to --help text (RHEL-143036)
- userdb: fix typo (RHEL-143036)
- man/userdbctl: fixup version info (RHEL-143036)
- user-record: add a concept of inverting per-host matching sections in user record (RHEL-143034)
- homectl: add interface for controlling storage for negative machine ID matches (RHEL-143034)
- logind: also save pidfdid as part of session state, even if we don't parse it (RHEL-53112)
- logind: support deserializing session leader through pidfdid (RHEL-53112)
- TEST-35-LOGIN: test coldplug without fdstore on kernels with pidfd id (RHEL-53112)
- logind: fix potential fd leak in deliver_session_leader_fd_consume() (RHEL-53112)
- Revert 'coredump: lock down EnterNamespace= mount even more' (RHEL-95219)
- coredump: add compat support for SYSTEMD_COREDUMP_ALLOW_NAMESPACE_CHANGE (RHEL-95219)

[257-22]
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-125822)
- hwdb: Add Accelerometer mount matrix for Irbis TW43 (RHEL-72702)
- hwdb: map FN key on TongFang X4SP4NAL laptops (RHEL-72702)
- hwdb: update rules (RHEL-72702)
- hwdb: update autosuspend rules (RHEL-72702)
- Add Razer Cobra mouse to hwdb (RHEL-72702)
- hwdb: enable autosuspend for Dell DW5826e WWAN modem (RHEL-72702)
- hwdb: sort SDR devices by vendor name (RHEL-72702)
- 70-mouse.hwdb: Add Razer Basilisk V3, Asus Cerberus, +2 more (RHEL-72702)
- hwdb: run 'update-hwdb' (RHEL-72702)
- Add Hantek DSO-6022 oscilloscopes and compatible devices (RHEL-72702)
- Update 60-sensor.hwdb - Add support for Lenovo Legion Go (RHEL-72702)
- hwdb: add Airspy devices (RHEL-72702)
- hwdb: add more devices (RHEL-72702)
- hwdb: add MiriSDR MSi2500 devices (RHEL-72702)
- hwdb: add missing Ettus Research B200 rule (RHEL-72702)
- hwdb: add LimeSDR XTRX devices (RHEL-72702)
- hwdb: add HydraSDR RFOne (RHEL-72702)
- hwdb: add SDRplay devices (RHEL-72702)
- hwdb: update (RHEL-72702)
- hwdb: fix calibrate rotation sensor for Positivo K116J (#39189) (RHEL-72702)
- Add Nulea M501 trackball to hwdb (RHEL-72702)
- add comment to 70-mouse.hwdb regarding generic name for Nulea M501 USB dongle (RHEL-72702)
- remove extra space from new hwdb.d/70-mouse.hwdb entries to fix failing test (RHEL-72702)
- remove bonus line (RHEL-72702)
- hwdb: drop trailing whitespace (RHEL-72702)
- remove