[ubuntu/vivid-security] lxc 1.1.2-0ubuntu3.2 (Accepted)

[Tyler Hicks]

lxc (1.1.2-0ubuntu3.2) vivid-security; urgency=medium

  * SECURITY UPDATE: Arbitrary host file access and AppArmor
    confinement breakout via lxc-start following symlinks while
    setting up mounts within a malicious container (LP: #1476662).
    - debian/patches/0010-CVE-2015-1335.patch: block mounts to paths
      containing symlinks and block bind mounts from relative paths
      containing symlinks. Patch from upstream.
    - CVE-2015-1335

Date: 2015-09-22 23:44:13.933101+00:00
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Signed-By: Tyler Hicks <tyhicks at canonical.com>
https://launchpad.net/ubuntu/+source/lxc/1.1.2-0ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.