[ubuntu/trusty-proposed] lxc 1.0.10-0ubuntu1 (Accepted)
Stéphane Graber
stgraber at ubuntu.com
Mon May 29 14:47:27 UTC 2017
lxc (1.0.10-0ubuntu1) trusty; urgency=medium
* New upstream bugfix release. (LP: #1693002)
- Security fix for CVE-2016-10124
- Security fix for CVE-2017-5985
- attach: simplify lsm_openat()
- commands: improve logging
- utils: add macro __LXC_NUMSTRLEN
- tests; Don't cause test failures on cleanup errors
- conf: clearly report to either use drop or keep
- attach: close lsm label file descriptor
- conf, attach: save errno across call to close
- templates/lxc-debian.in: Fix typo in calling dpkg with
--print-foreign-architectures option
- templates/lxc-debian.in: handle ppc hostarch -> powerpc
- Fix regression in errno handling cherry-pick
- don't try to get stuff from /usr/lib/systemd on the host
- lxc-opensuse: rm poweroff.target -> sigpwr.target copy
- Add --enable-gnutls option
- tests: skip unpriv tests on broken overlay module
- Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
- Make lxc-start-ephemeral Python 3.2-compatible
- systemd: enable delegate in service file
- confile: clear lxc.network..ipv{4,6} when empty
- seccomp: allow x32 guests on amd64 hosts.
- squeeze is not a supported release anymore, drop the key
- seccomp: set SCMP_FLTATR_ATL_TSKIP if available
- lxc-checkconfig: verify new[ug]idmap are setuid-root
- python3: Deal with potential NULL char*
- lxc-download.in / allow setting keyserver from env
- lxc-download.in / Document keyserver change in help
- Change variable check to match existing style
- tests: Support running on IPv6 networks
- tests: Kill containers (don't wait for shutdown)
- Fix opening wrong file in suggest_default_idmap
- lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
- Increased buffer length in print_stats()
- remove obsolete note about api stability
- conf: less error prone pointer access
- create ISSUE_TEMPLATE.md
- issue template: fix typo
- conf: order mount options
- commands: avoid NULL pointer dereference
- commands: non-functional changes
- lxccontainer: avoid NULL pointer dereference
Date: Tue, 23 May 2017 14:44:34 -0400
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/lxc/1.0.10-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 23 May 2017 14:44:34 -0400
Source: lxc
Binary: lxc lxc-dbg lxc-dev lxc-templates lxc-tests liblxc1 python3-lxc
Architecture: source
Version: 1.0.10-0ubuntu1
Distribution: trusty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Description:
liblxc1 - Linux Containers userspace tools (library)
lxc - Linux Containers userspace tools
lxc-dbg - Linux Containers userspace tools (debug)
lxc-dev - Linux Containers userspace tools (development)
lxc-templates - Linux Containers userspace tools (templates)
lxc-tests - Linux Containers userspace tools (test binaries)
python3-lxc - Linux Containers userspace tools (Python 3.x bindings)
Launchpad-Bugs-Fixed: 1693002
Changes:
lxc (1.0.10-0ubuntu1) trusty; urgency=medium
.
* New upstream bugfix release. (LP: #1693002)
- Security fix for CVE-2016-10124
- Security fix for CVE-2017-5985
.
- attach: simplify lsm_openat()
- commands: improve logging
- utils: add macro __LXC_NUMSTRLEN
- tests; Don't cause test failures on cleanup errors
- conf: clearly report to either use drop or keep
- attach: close lsm label file descriptor
- conf, attach: save errno across call to close
- templates/lxc-debian.in: Fix typo in calling dpkg with
--print-foreign-architectures option
- templates/lxc-debian.in: handle ppc hostarch -> powerpc
- Fix regression in errno handling cherry-pick
- don't try to get stuff from /usr/lib/systemd on the host
- lxc-opensuse: rm poweroff.target -> sigpwr.target copy
- Add --enable-gnutls option
- tests: skip unpriv tests on broken overlay module
- Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
- Make lxc-start-ephemeral Python 3.2-compatible
- systemd: enable delegate in service file
- confile: clear lxc.network..ipv{4,6} when empty
- seccomp: allow x32 guests on amd64 hosts.
- squeeze is not a supported release anymore, drop the key
- seccomp: set SCMP_FLTATR_ATL_TSKIP if available
- lxc-checkconfig: verify new[ug]idmap are setuid-root
- python3: Deal with potential NULL char*
- lxc-download.in / allow setting keyserver from env
- lxc-download.in / Document keyserver change in help
- Change variable check to match existing style
- tests: Support running on IPv6 networks
- tests: Kill containers (don't wait for shutdown)
- Fix opening wrong file in suggest_default_idmap
- lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
- Increased buffer length in print_stats()
- remove obsolete note about api stability
- conf: less error prone pointer access
- create ISSUE_TEMPLATE.md
- issue template: fix typo
- conf: order mount options
- commands: avoid NULL pointer dereference
- commands: non-functional changes
- lxccontainer: avoid NULL pointer dereference
Checksums-Sha1:
3bf9b99460cb965849c1f38517ef33df792e865e 2384 lxc_1.0.10-0ubuntu1.dsc
9d67ffc3a07ab8052aca208644c9849232576664 846212 lxc_1.0.10.orig.tar.gz
750ec9108489e60b32e93cb9ccb6acdd44b3f978 44208 lxc_1.0.10-0ubuntu1.debian.tar.xz
Checksums-Sha256:
34c73d4149996164ba0dcf5ac5e33a76dba726f8e588c4c6e79229d99431daca 2384 lxc_1.0.10-0ubuntu1.dsc
fbadfb1a796df6b5bedde573e0174acac3602e48dd00e43c1be4f485adb26eb8 846212 lxc_1.0.10.orig.tar.gz
ad2773548ee50bf805422383e0c96036d62235393b94d3c7ee5078eb8dcdba39 44208 lxc_1.0.10-0ubuntu1.debian.tar.xz
Files:
605922726c409edff0767af67b2015c9 2384 admin optional lxc_1.0.10-0ubuntu1.dsc
683a047ab60c2391d6f30699259a7470 846212 admin optional lxc_1.0.10.orig.tar.gz
926d70066bfbc187cfb85fdea62eb495 44208 admin optional lxc_1.0.10-0ubuntu1.debian.tar.xz
More information about the Trusty-changes
mailing list