[ubuntu/trusty-proposed] lxc 1.0.9-0ubuntu1 (Accepted)

Stéphane Graber stgraber at ubuntu.com
Thu Dec 15 18:43:35 UTC 2016


lxc (1.0.9-0ubuntu1) trusty; urgency=medium

  * New upstream bugfix release. (LP: #1647016)
    - Security fix for CVE-2016-8649
    - utils: make detect_ramfs_rootfs() return bool
    - tests: add test for detect_ramfs_rootfs()
    - add Documentation entries to lxc and lxc@ units
    - mark the python examples as having utf-8 encoding
    - log: sanity check the returned value from snprintf()
    - lxc-alpine: mount /dev/shm as tmpfs
    - archlinux: Do DHCP on eth0
    - archlinux: Fix resolving
    - Drop leftover references to lxc_strerror()
    - tests: fix image download for s390x
    - tools: fix coding style in lxc_attach
    - tools: make overlay valid backend
    - tools: better error reporting for lxc-start
    - alpine: Fix installing extra packages
    - lxc-alpine: do not drop setfcap
    - s390x: Fix seccomp handling of personalities
    - tools: correct the argument typo in lxc_copy
    - Use libtool for liblxc.so
    - c/r: use --external instead of --veth-pair
    - c/r: remember to increment netnr
    - c/r: add checkpoint/restore support for macvlan interfaces
    - ubuntu: Fix package upgrades requiring proc
    - c/r: drop duplicate hunk from macvlan case
    - c/r: use snprintf to compute device name
    - Tweak libtool handling to work with Android
    - tests: add lxc_error() and lxc_debug()
    - container start: clone newcgroup immediately
    - use python3_sitearch for including the python code
    - fix rpm build, include all built files, but only once
    - cgfs: fix invalid free()
    - find OpenSUSE's build also as obs-build
    - improve help text for --fancy and --fancy-format
    - improve wording of the help page for lxc-ls
    - cgfs: add print_cgfs_init_debuginfo()
    - cgfs: skip empty entries under /proc/self/cgroup
    - cgfs: explicitly check for NULL
    - tools: use correct exit code for lxc-stop
    - c/r: explicitly emit bind mounts as criu arguments
    - log: bump LXC_LOG_BUFFER_SIZE to 4096
    - conf: merge network namespace move & rename on shutdown
    - c/r: save criu's stdout during dump too
    - c/r: remove extra \ns from logs
    - c/r: fix off-by-one error
    - c/r: check state before doing a checkpoint/restore
    - start: CLONE_NEWCGROUP after we have setup cgroups
    - create symlink for /var/run
    - utils: add lxc_append_string()
    - cgroups: remove isolated cpus from cpuset.cpus
    - Update Ubuntu release name: add zesty and remove wily
    - templates: add squashfs support to lxc-ubuntu-cloud.in
    - cgroups: skip v2 hierarchy entry
    - also stop lxc-net in runlevels 0 and 6
    - add lxc.egg-info to gitignore
    - install bash completion where pkg-config tells us to
    - conf: do not use %m format specifier
    - debian: Don't depend on libui-dialog-perl
    - cgroups: use %zu format specifier to print size_t
    - lxc-checkpoint: automatically detect if --external or --veth-pair
    - cgroups: prevent segfault in cgfsng
    - utils: add lxc_preserve_ns()
    - start: add netnsfd to lxc_handler
    - conf: use lxc_preserve_ns()
    - attach: use lxc_preserve_ns()
    - lxc_user_nic: use lxc_preserve_ns()
    - conf, start: improve log output
    - conf: explicitly remove veth device from host
    - conf, start: be smarter when deleting networks
    - start, utils: improve preserve_ns()
    - start, error: improve log + non-functional changes
    - start, namespace: move ns_info to namespace.{c,h}
    - attach, utils: bugfixes
    - attach: use ns_info[LXC_NS_MAX] struct
    - namespace: always attach to user namespace first
    - cgroup: improve isolcpus handling
    - cgroups: handle non-existent isolcpus file
    - utils: add lxc_safe_uint()
    - tests: add unit tests for lxc_safe_uint()
    - utils: add lxc_safe_int()
    - tests: add unit tests for lxc_safe_int()
    - conf/ile: get ip prefix via lxc_safe_uint()
    - confile: use lxc_safe_u/int in config_init_{u,g}id
    - conf/ile: use lxc_safe_uint() in config_pts()
    - conf/ile: use lxc_safe_u/int() in config_start()
    - conf/ile: use lxc_safe_uint() in config_monitor()
    - conf/ile: use lxc_safe_uint() in config_tty()
    - conf/ile: use lxc_safe_uint() in config_kmsg()
    - conf/ile: avoid atoi in config_lsm_aa_incomplete()
    - conf/ile: use lxc_safe_uint() in config_autodev()
    - conf/ile: avoid atoi() in config_ephemeral()
    - utils: use lxc_safe_int()
    - lxc_monitord: use lxc_safe_int() && use exit()
    - start: use lxc_safe_int()
    - conf: use lxc_safe_{u}int()
    - tools/lxc_execute: use lxc_safe_uint()
    - tools/lxc_stop: use lxc_safe_uint()
    - utils: add lxc_safe_long()
    - tests: add unit tests for lxc_safe_long()
    - tools/lxc_stop: use lxc_safe_long()
    - tools/lxc_top: use lxc_safe_int()
    - tools/lxc_ls: use lxc_safe_uint()
    - tools/lxc_autostart: use lxc_safe_{int,long}()
    - tools/lxc_console: use lxc_safe_uint()
    - tools: replace non-standard namespace identifiers
    - Configure a static MAC address on the LXC bridge
    - tests: remove overflow tests
    - attach: do not send procfd to attached process
  * Autopkgtest:
    - Restrict tests to run on standalone systems.

Date: Sat, 03 Dec 2016 00:16:35 -0500
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/lxc/1.0.9-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Sat, 03 Dec 2016 00:16:35 -0500
Source: lxc
Binary: lxc lxc-dbg lxc-dev lxc-templates lxc-tests liblxc1 python3-lxc
Architecture: source
Version: 1.0.9-0ubuntu1
Distribution: trusty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Description:
 liblxc1    - Linux Containers userspace tools (library)
 lxc        - Linux Containers userspace tools
 lxc-dbg    - Linux Containers userspace tools (debug)
 lxc-dev    - Linux Containers userspace tools (development)
 lxc-templates - Linux Containers userspace tools (templates)
 lxc-tests  - Linux Containers userspace tools (test binaries)
 python3-lxc - Linux Containers userspace tools (Python 3.x bindings)
Launchpad-Bugs-Fixed: 1647016
Changes:
 lxc (1.0.9-0ubuntu1) trusty; urgency=medium
 .
   * New upstream bugfix release. (LP: #1647016)
     - Security fix for CVE-2016-8649
     - utils: make detect_ramfs_rootfs() return bool
     - tests: add test for detect_ramfs_rootfs()
     - add Documentation entries to lxc and lxc@ units
     - mark the python examples as having utf-8 encoding
     - log: sanity check the returned value from snprintf()
     - lxc-alpine: mount /dev/shm as tmpfs
     - archlinux: Do DHCP on eth0
     - archlinux: Fix resolving
     - Drop leftover references to lxc_strerror()
     - tests: fix image download for s390x
     - tools: fix coding style in lxc_attach
     - tools: make overlay valid backend
     - tools: better error reporting for lxc-start
     - alpine: Fix installing extra packages
     - lxc-alpine: do not drop setfcap
     - s390x: Fix seccomp handling of personalities
     - tools: correct the argument typo in lxc_copy
     - Use libtool for liblxc.so
     - c/r: use --external instead of --veth-pair
     - c/r: remember to increment netnr
     - c/r: add checkpoint/restore support for macvlan interfaces
     - ubuntu: Fix package upgrades requiring proc
     - c/r: drop duplicate hunk from macvlan case
     - c/r: use snprintf to compute device name
     - Tweak libtool handling to work with Android
     - tests: add lxc_error() and lxc_debug()
     - container start: clone newcgroup immediately
     - use python3_sitearch for including the python code
     - fix rpm build, include all built files, but only once
     - cgfs: fix invalid free()
     - find OpenSUSE's build also as obs-build
     - improve help text for --fancy and --fancy-format
     - improve wording of the help page for lxc-ls
     - cgfs: add print_cgfs_init_debuginfo()
     - cgfs: skip empty entries under /proc/self/cgroup
     - cgfs: explicitly check for NULL
     - tools: use correct exit code for lxc-stop
     - c/r: explicitly emit bind mounts as criu arguments
     - log: bump LXC_LOG_BUFFER_SIZE to 4096
     - conf: merge network namespace move & rename on shutdown
     - c/r: save criu's stdout during dump too
     - c/r: remove extra \ns from logs
     - c/r: fix off-by-one error
     - c/r: check state before doing a checkpoint/restore
     - start: CLONE_NEWCGROUP after we have setup cgroups
     - create symlink for /var/run
     - utils: add lxc_append_string()
     - cgroups: remove isolated cpus from cpuset.cpus
     - Update Ubuntu release name: add zesty and remove wily
     - templates: add squashfs support to lxc-ubuntu-cloud.in
     - cgroups: skip v2 hierarchy entry
     - also stop lxc-net in runlevels 0 and 6
     - add lxc.egg-info to gitignore
     - install bash completion where pkg-config tells us to
     - conf: do not use %m format specifier
     - debian: Don't depend on libui-dialog-perl
     - cgroups: use %zu format specifier to print size_t
     - lxc-checkpoint: automatically detect if --external or --veth-pair
     - cgroups: prevent segfault in cgfsng
     - utils: add lxc_preserve_ns()
     - start: add netnsfd to lxc_handler
     - conf: use lxc_preserve_ns()
     - attach: use lxc_preserve_ns()
     - lxc_user_nic: use lxc_preserve_ns()
     - conf, start: improve log output
     - conf: explicitly remove veth device from host
     - conf, start: be smarter when deleting networks
     - start, utils: improve preserve_ns()
     - start, error: improve log + non-functional changes
     - start, namespace: move ns_info to namespace.{c,h}
     - attach, utils: bugfixes
     - attach: use ns_info[LXC_NS_MAX] struct
     - namespace: always attach to user namespace first
     - cgroup: improve isolcpus handling
     - cgroups: handle non-existent isolcpus file
     - utils: add lxc_safe_uint()
     - tests: add unit tests for lxc_safe_uint()
     - utils: add lxc_safe_int()
     - tests: add unit tests for lxc_safe_int()
     - conf/ile: get ip prefix via lxc_safe_uint()
     - confile: use lxc_safe_u/int in config_init_{u,g}id
     - conf/ile: use lxc_safe_uint() in config_pts()
     - conf/ile: use lxc_safe_u/int() in config_start()
     - conf/ile: use lxc_safe_uint() in config_monitor()
     - conf/ile: use lxc_safe_uint() in config_tty()
     - conf/ile: use lxc_safe_uint() in config_kmsg()
     - conf/ile: avoid atoi in config_lsm_aa_incomplete()
     - conf/ile: use lxc_safe_uint() in config_autodev()
     - conf/ile: avoid atoi() in config_ephemeral()
     - utils: use lxc_safe_int()
     - lxc_monitord: use lxc_safe_int() && use exit()
     - start: use lxc_safe_int()
     - conf: use lxc_safe_{u}int()
     - tools/lxc_execute: use lxc_safe_uint()
     - tools/lxc_stop: use lxc_safe_uint()
     - utils: add lxc_safe_long()
     - tests: add unit tests for lxc_safe_long()
     - tools/lxc_stop: use lxc_safe_long()
     - tools/lxc_top: use lxc_safe_int()
     - tools/lxc_ls: use lxc_safe_uint()
     - tools/lxc_autostart: use lxc_safe_{int,long}()
     - tools/lxc_console: use lxc_safe_uint()
     - tools: replace non-standard namespace identifiers
     - Configure a static MAC address on the LXC bridge
     - tests: remove overflow tests
     - attach: do not send procfd to attached process
   * Autopkgtest:
     - Restrict tests to run on standalone systems.
Checksums-Sha1:
 d978c5ee1c745e0d13985171a9c2ca160598c72d 2310 lxc_1.0.9-0ubuntu1.dsc
 3d01de9925430a0914d8df304ac31a74e0b6fbfc 851593 lxc_1.0.9.orig.tar.gz
 304745818fe43fcd265ff93b581e91039153cab9 43480 lxc_1.0.9-0ubuntu1.debian.tar.xz
Checksums-Sha256:
 6dc6dd282c3ef6be32a40f3f94a59c1b42ffd07622cda95afe11eb31beb3491a 2310 lxc_1.0.9-0ubuntu1.dsc
 8418e0f9626d4c4a50786ba31148218735261a4c5a1d93259e5dd7817e306f35 851593 lxc_1.0.9.orig.tar.gz
 5681071f37caf4823990369c4559c0cc30dc8da82e55e040580690d026f82881 43480 lxc_1.0.9-0ubuntu1.debian.tar.xz
Files:
 38768eefd014484f3ebc266320c0262b 2310 admin optional lxc_1.0.9-0ubuntu1.dsc
 78367dc7c477e0a3640ccf988c4c64d5 851593 admin optional lxc_1.0.9.orig.tar.gz
 3e30e5028eb7c75ac7ab8ce05169d69e 43480 admin optional lxc_1.0.9-0ubuntu1.debian.tar.xz


More information about the Trusty-changes mailing list