[ubuntu/hirsute-proposed] docker.io 20.10.7-0ubuntu5~21.04.1 (Accepted)

[Lucas Kanashiro]

docker.io (20.10.7-0ubuntu5~21.04.1) hirsute; urgency=medium

  * Backport version 20.10.7-0ubuntu5 from Impish (LP: #1938908).

docker.io (20.10.7-0ubuntu5) impish; urgency=medium

  [ Sergio Durigan Junior ]
  * d/t/docker-in-lxd:
    Improve dep8 test.  Make it run a more complex test against an
    ubuntu:devel docker container, especially because glibc updates might
    break docker.io.  Improve test reliability when running autopkgtest
    locally.

  [ Steve Beattie ]
  * SECURITY UPDATE: insufficiently restricted directory permissions
    - d/p/CVE-2021-41091.patch: Lock down docker root dir perms.
    - CVE-2021-41091
  * SECURITY UPDATE: permissions modifications outside of install directory
    - d/p/CVE-2021-41089.patch: chrootarchive: don't create parent dirs
      outside of chroot.
    - CVE-2021-41089

docker.io (20.10.7-0ubuntu4) impish; urgency=medium

  * d/p/seccomp-add-support-for-clone3-syscall-in-default-policy.patch: Fix
    failure with new glibc clone3 syscall adding it to the default seccomp
    policy (LP: #1943049).

Date: Wed, 06 Oct 2021 10:41:32 -0300
Changed-By: Lucas Kanashiro <kanashiro at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Lucas Kanashiro <kanashiro at riseup.net>
https://launchpad.net/ubuntu/+source/docker.io/20.10.7-0ubuntu5~21.04.1
-------------- next part --------------
Format: 1.8
Date: Wed, 06 Oct 2021 10:41:32 -0300
Source: docker.io
Binary: docker-doc docker.io golang-docker-dev golang-github-docker-docker-dev vim-syntax-docker
Built-For-Profiles: noudeb
Architecture: source
Version: 20.10.7-0ubuntu5~21.04.1
Distribution: hirsute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lucas Kanashiro <kanashiro at ubuntu.com>
Description:
 docker-doc - Linux container runtime -- documentation
 docker.io  - Linux container runtime
 golang-docker-dev - Transitional package for golang-github-docker-docker-dev
 golang-github-docker-docker-dev - Externally reusable Go packages included with Docker
 vim-syntax-docker - Docker container engine - Vim highlighting syntax files
Launchpad-Bugs-Fixed: 1938908 1943049
Changes:
 docker.io (20.10.7-0ubuntu5~21.04.1) hirsute; urgency=medium
 .
   * Backport version 20.10.7-0ubuntu5 from Impish (LP: #1938908).
 .
 docker.io (20.10.7-0ubuntu5) impish; urgency=medium
 .
   [ Sergio Durigan Junior ]
   * d/t/docker-in-lxd:
     Improve dep8 test.  Make it run a more complex test against an
     ubuntu:devel docker container, especially because glibc updates might
     break docker.io.  Improve test reliability when running autopkgtest
     locally.
 .
   [ Steve Beattie ]
   * SECURITY UPDATE: insufficiently restricted directory permissions
     - d/p/CVE-2021-41091.patch: Lock down docker root dir perms.
     - CVE-2021-41091
   * SECURITY UPDATE: permissions modifications outside of install directory
     - d/p/CVE-2021-41089.patch: chrootarchive: don't create parent dirs
       outside of chroot.
     - CVE-2021-41089
 .
 docker.io (20.10.7-0ubuntu4) impish; urgency=medium
 .
   * d/p/seccomp-add-support-for-clone3-syscall-in-default-policy.patch: Fix
     failure with new glibc clone3 syscall adding it to the default seccomp
     policy (LP: #1943049).
Checksums-Sha1:
 0a059e2a81a2e7efc7158eb64cd63807f0c70b36 4073 docker.io_20.10.7-0ubuntu5~21.04.1.dsc
 df90cdb18c9998c5834c9897d7122089722c0b70 40208 docker.io_20.10.7-0ubuntu5~21.04.1.debian.tar.xz
Checksums-Sha256:
 e365a2c32f89f1d89df8ef95e547a4a2f11d781da484c571a2b5f4c0db978e77 4073 docker.io_20.10.7-0ubuntu5~21.04.1.dsc
 98b9504ff2b6f8ea21d8cf2aa31e73c23f5801b00f83d704a83368dcb26bd178 40208 docker.io_20.10.7-0ubuntu5~21.04.1.debian.tar.xz
Files:
 7b65816e404f4b09bf259738ea2025c2 4073 admin optional docker.io_20.10.7-0ubuntu5~21.04.1.dsc
 ab2e9882f5c3e2b9796cf7d23d80f8c3 40208 admin optional docker.io_20.10.7-0ubuntu5~21.04.1.debian.tar.xz
Original-Maintainer: Paul Tagliamonte <paultag at debian.org>