Fix one security issue and update keyboard hwdb

sources

@@ -1 +1 @@
-SHA512 (systemd-f4afb95.tar.gz) = b9a846109e5153d09d899cb54bb5ee6ea085b5ec6baff1f9140a8c36ca38d5d2e847792d1fb93c8f3d4074eed8aa74b9c9234b5f672a8de43d3dde11586c4967
+SHA512 (systemd-33ccd62.tar.gz) = 3f015ed56e8b6615872210fe18597051800c61ec732e3eb00b9ff710082008b05c0b5d8ab82c45d251c4a28dd4a5bd02084fa79193ca92bc12d15f870ff44985

systemd.spec

@@ -1,4 +1,4 @@
-%global commit f4afb950af885045e45e996b6afa3d2dac52de77
+%global commit 33ccd6236d5f9761d3f06a90ec3b63903033bc1a
 %{?commit:%global shortcommit %(c=%{commit}; echo ${c:0:7})}
 
 %global stable 1
@@ -15,7 +15,7 @@
 Name:           systemd
 Url:            https://www.freedesktop.org/wiki/Software/systemd
 Version:        239
-Release:        13%{?commit:.git%{shortcommit}}%{?dist}
+Release:        14%{?commit:.git%{shortcommit}}%{?dist}
 # For a breakdown of the licensing, see README
 License:        LGPLv2+ and MIT and GPLv2+
 Summary:        System and Service Manager
@@ -44,6 +44,8 @@ Source10:       systemd-udev-trigger-no-reload.conf
 Source11:       20-grubby.install
 Source12:       systemd-user
 
+Source13:       https://raw.githubusercontent.com/systemd/systemd/v243/hwdb/60-keyboard.hwdb
+
 %if 0
 GIT_DIR=../../src/systemd/.git git format-patch-ab --no-signature -M -N v235..v235-stable
 i=1; for j in 00*patch; do printf "Patch%04d:      %s\n" $i $j; i=$((i+1));done|xclip
@@ -262,6 +264,8 @@ They can be useful to test systemd internals.
 %prep
 %autosetup %{?commit:-n %{name}%{?stable:-stable}-%{commit}} -p1 -Sgit
 
+cp -v %{SOURCE13} hwdb/
+
 %build
 %define ntpvendor %(source /etc/os-release; echo ${ID})
 %{!?ntpvendor: echo 'NTP vendor zone is not set!'; exit 1}
@@ -693,6 +697,11 @@ fi
 %files tests -f .file-list-tests
 
 %changelog
+* Tue Sep  3 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-14.git33ccd62
+- Security issue: unprivileged users were allowed to change DNS
+  servers configured in systemd-resolved.
+- hwdb entries for keyboards are updated to the latest version (#1725717)
+
 * Sat Jul 20 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 239-13.gitf4afb95
 - Fix systemd-mount with CIFS (#1708996)
 - Minor build and documentation fixes