[ubuntu-cloud-archive/kilo-proposed] lxc (Accepted)

[James Page]

 lxc (1.1.2-0ubuntu3.1~cloud0) trusty-kilo; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 lxc (1.1.2-0ubuntu3.1) vivid-security; urgency=medium
 .
   * SECURITY UPDATE: Arbitrary file creation via unintentional symlink
     following when accessing an LXC lock file (LP: #1470842)
     - debian/patches/0008-CVE-2015-1331.patch: Use /run/lxc/lock, rather than
       /run/lock/lxc, as /run and /run/lxc is only writable by root. Based on
       patch from upstream.
     - CVE-2015-1131
   * SECURITY UPDATE: Container AppArmor/SELinux confinement breakout via
     lxc-attach using a potentially malicious container proc filesystem to
     initialize confinement (LP: #1475050)
     - debian/patches/0009-CVE-2015-1334.patch: Use the host's proc filesystem
       to set up AppArmor profile and SELinux domain transitions during
       lxc-attach. Based on patch from upstream.
     - CVE-2015-1334

Date: Thu, 23 Jul 2015 07:52:46 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: James Page <james.page at ubuntu.com>