[ubuntu/bionic-proposed] containerd 1.5.5-0ubuntu3~18.04.1 (Accepted)

[Lucas Kanashiro]

containerd (1.5.5-0ubuntu3~18.04.1) bionic; urgency=medium

  * Backport version 1.5.5-0ubuntu3 from Impish (LP: #1938908).
    - d/control: do not b-d on libbtrfs-dev, it is not available in Bionic.
    - d/control: b-d on golang-1.13-go instead of golang-go.
    - d/rules: set GO111MODULE to off, to avoid Internet connection during the
      build.

containerd (1.5.5-0ubuntu3) impish; urgency=medium

  * SECURITY UPDATE: insufficiently restricted directory permissions
    - debian/patches/1.5-reduce-directory-permissions.patch: reduce
      permissions for bundle dir in runtime/v1/linux/bundle.go,
      runtime/v1/linux/bundle_test.go, runtime/v2/bundle.go,
      runtime/v2/bundle_default.go, runtime/v2/bundle_linux.go,
      runtime/v2/bundle_linux_test.go, runtime/v2/bundle_test.go,
      snapshots/btrfs/btrfs.go.
    - CVE-2021-41103

containerd (1.5.5-0ubuntu2) impish; urgency=medium

  * d/p/seccomp-support-clone3-syscall.patch: clone3 is explicitly requested
    to give ENOSYS instead of the default EPERM, when CAP_SYS_ADMIN is unset.
    (LP: #1943049).

Date: Fri, 08 Oct 2021 11:55:12 -0300
Changed-By: Lucas Kanashiro <kanashiro at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Lucas Kanashiro <kanashiro at riseup.net>
https://launchpad.net/ubuntu/+source/containerd/1.5.5-0ubuntu3~18.04.1
-------------- next part --------------
Format: 1.8
Date: Fri, 08 Oct 2021 11:55:12 -0300
Source: containerd
Binary: containerd golang-github-containerd-containerd-dev
Architecture: source
Version: 1.5.5-0ubuntu3~18.04.1
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lucas Kanashiro <kanashiro at ubuntu.com>
Description:
 containerd - daemon to control runC
 golang-github-containerd-containerd-dev - runC develpoment files
Launchpad-Bugs-Fixed: 1938908 1943049
Changes:
 containerd (1.5.5-0ubuntu3~18.04.1) bionic; urgency=medium
 .
   * Backport version 1.5.5-0ubuntu3 from Impish (LP: #1938908).
     - d/control: do not b-d on libbtrfs-dev, it is not available in Bionic.
     - d/control: b-d on golang-1.13-go instead of golang-go.
     - d/rules: set GO111MODULE to off, to avoid Internet connection during the
       build.
 .
 containerd (1.5.5-0ubuntu3) impish; urgency=medium
 .
   * SECURITY UPDATE: insufficiently restricted directory permissions
     - debian/patches/1.5-reduce-directory-permissions.patch: reduce
       permissions for bundle dir in runtime/v1/linux/bundle.go,
       runtime/v1/linux/bundle_test.go, runtime/v2/bundle.go,
       runtime/v2/bundle_default.go, runtime/v2/bundle_linux.go,
       runtime/v2/bundle_linux_test.go, runtime/v2/bundle_test.go,
       snapshots/btrfs/btrfs.go.
     - CVE-2021-41103
 .
 containerd (1.5.5-0ubuntu2) impish; urgency=medium
 .
   * d/p/seccomp-support-clone3-syscall.patch: clone3 is explicitly requested
     to give ENOSYS instead of the default EPERM, when CAP_SYS_ADMIN is unset.
     (LP: #1943049).
Checksums-Sha1:
 79018aa84a5b8b57d9ac31182cf7d7b5737e74d9 2429 containerd_1.5.5-0ubuntu3~18.04.1.dsc
 0cf081ac19e04c3007fce917f0ba07e211e9c6f3 23452 containerd_1.5.5-0ubuntu3~18.04.1.debian.tar.xz
Checksums-Sha256:
 d1b793321a0e071507b3f4a09de4c1e64d30309182b1e4a6db068676af761857 2429 containerd_1.5.5-0ubuntu3~18.04.1.dsc
 4154194466ba7bbe66dbc216cf7b55f92adebff0258ca6fb88836599a1ef59b8 23452 containerd_1.5.5-0ubuntu3~18.04.1.debian.tar.xz
Files:
 8c364d368200f703edfeac48e39fed92 2429 admin optional containerd_1.5.5-0ubuntu3~18.04.1.dsc
 03a5a49fa1fd4bb5c504a70441f2786b 23452 admin optional containerd_1.5.5-0ubuntu3~18.04.1.debian.tar.xz
Original-Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>