[ubuntu/zesty-proposed] lxc 2.0.6-0ubuntu1 (Accepted)

Stéphane Graber stgraber at ubuntu.com
Thu Nov 24 05:10:12 UTC 2016 

lxc (2.0.6-0ubuntu1) zesty; urgency=medium

  * New upstream bugfix release (2.0.6):
    - Security fix for CVE-2016-8649
    - utils: make detect_ramfs_rootfs() return bool
    - tests: add test for detect_ramfs_rootfs()
    - add Documentation entries to lxc and lxc@ units
    - mark the python examples as having utf-8 encoding
    - log: sanity check the returned value from snprintf()
    - lxc-alpine: mount /dev/shm as tmpfs
    - archlinux: Do DHCP on eth0
    - archlinux: Fix resolving
    - Drop leftover references to lxc_strerror()
    - tests: fix image download for s390x
    - tools: fix coding style in lxc_attach
    - tools: make overlay valid backend
    - tools: better error reporting for lxc-start
    - alpine: Fix installing extra packages
    - lxc-alpine: do not drop setfcap
    - s390x: Fix seccomp handling of personalities
    - tools: correct the argument typo in lxc_copy
    - Use libtool for liblxc.so
    - c/r: use --external instead of --veth-pair
    - c/r: remember to increment netnr
    - c/r: add checkpoint/restore support for macvlan interfaces
    - ubuntu: Fix package upgrades requiring proc
    - c/r: drop duplicate hunk from macvlan case
    - c/r: use snprintf to compute device name
    - Tweak libtool handling to work with Android
    - tests: add lxc_error() and lxc_debug()
    - container start: clone newcgroup immediately
    - use python3_sitearch for including the python code
    - fix rpm build, include all built files, but only once
    - cgfs: fix invalid free()
    - find OpenSUSE's build also as obs-build
    - improve help text for --fancy and --fancy-format
    - improve wording of the help page for lxc-ls
    - cgfs: add print_cgfs_init_debuginfo()
    - cgfs: skip empty entries under /proc/self/cgroup
    - cgfs: explicitly check for NULL
    - tools: use correct exit code for lxc-stop
    - c/r: explicitly emit bind mounts as criu arguments
    - log: bump LXC_LOG_BUFFER_SIZE to 4096
    - conf: merge network namespace move & rename on shutdown
    - c/r: save criu's stdout during dump too
    - c/r: remove extra \ns from logs
    - c/r: fix off-by-one error
    - c/r: check state before doing a checkpoint/restore
    - start: CLONE_NEWCGROUP after we have setup cgroups
    - create symlink for /var/run
    - utils: add lxc_append_string()
    - cgroups: remove isolated cpus from cpuset.cpus
    - Update Ubuntu release name: add zesty and remove wily
    - templates: add squashfs support to lxc-ubuntu-cloud.in
    - cgroups: skip v2 hierarchy entry
    - also stop lxc-net in runlevels 0 and 6
    - add lxc.egg-info to gitignore
    - install bash completion where pkg-config tells us to
    - conf: do not use %m format specifier
    - debian: Don't depend on libui-dialog-perl
    - cgroups: use %zu format specifier to print size_t
    - lxc-checkpoint: automatically detect if --external or --veth-pair
    - cgroups: prevent segfault in cgfsng
    - utils: add lxc_preserve_ns()
    - start: add netnsfd to lxc_handler
    - conf: use lxc_preserve_ns()
    - attach: use lxc_preserve_ns()
    - lxc_user_nic: use lxc_preserve_ns()
    - conf, start: improve log output
    - conf: explicitly remove veth device from host
    - conf, start: be smarter when deleting networks
    - start, utils: improve preserve_ns()
    - start, error: improve log + non-functional changes
    - start, namespace: move ns_info to namespace.{c,h}
    - attach, utils: bugfixes
    - attach: use ns_info[LXC_NS_MAX] struct
    - namespace: always attach to user namespace first
    - cgroup: improve isolcpus handling
    - cgroups: handle non-existent isolcpus file
    - utils: add lxc_safe_uint()
    - tests: add unit tests for lxc_safe_uint()
    - utils: add lxc_safe_int()
    - tests: add unit tests for lxc_safe_int()
    - conf/ile: get ip prefix via lxc_safe_uint()
    - confile: use lxc_safe_u/int in config_init_{u,g}id
    - conf/ile: use lxc_safe_uint() in config_pts()
    - conf/ile: use lxc_safe_u/int() in config_start()
    - conf/ile: use lxc_safe_uint() in config_monitor()
    - conf/ile: use lxc_safe_uint() in config_tty()
    - conf/ile: use lxc_safe_uint() in config_kmsg()
    - conf/ile: avoid atoi in config_lsm_aa_incomplete()
    - conf/ile: use lxc_safe_uint() in config_autodev()
    - conf/ile: avoid atoi() in config_ephemeral()
    - utils: use lxc_safe_int()
    - lxc_monitord: use lxc_safe_int() && use exit()
    - start: use lxc_safe_int()
    - conf: use lxc_safe_{u}int()
    - tools/lxc_execute: use lxc_safe_uint()
    - tools/lxc_stop: use lxc_safe_uint()
    - utils: add lxc_safe_long()
    - tests: add unit tests for lxc_safe_long()
    - tools/lxc_stop: use lxc_safe_long()
    - tools/lxc_top: use lxc_safe_int()
    - tools/lxc_ls: use lxc_safe_uint()
    - tools/lxc_autostart: use lxc_safe_{int,long}()
    - tools/lxc_console: use lxc_safe_uint()
    - tools: replace non-standard namespace identifiers
    - Configure a static MAC address on the LXC bridge
    - tests: remove overflow tests
    - attach: do not send procfd to attached process
  * Remaining patches:
    - 0001-Allocate-new-lxcbr0-subnet-at-startup-time.patch
  * Re-enable lxc-test-ubuntu on yakkety/zesty (template was fixed).

Date: Wed, 23 Nov 2016 23:56:02 -0500
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/lxc/2.0.6-0ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 23 Nov 2016 23:56:02 -0500
Source: lxc
Binary: lxc lxc1 lxc-common lxc-dev lxc-templates lxc-tests liblxc1 python3-lxc lua-lxc
Architecture: source
Version: 2.0.6-0ubuntu1
Distribution: zesty
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Stéphane Graber <stgraber at ubuntu.com>
Description:
 liblxc1    - Linux Containers userspace tools (library)
 lua-lxc    - Linux Containers userspace tools (LUA bindings)
 lxc        - Transitional package for lxc1
 lxc-common - Linux Containers userspace tools (common tools)
 lxc-dev    - Linux Containers userspace tools (development)
 lxc-templates - Linux Containers userspace tools (templates)
 lxc-tests  - Linux Containers userspace tools (test binaries)
 lxc1       - Linux Containers userspace tools
 python3-lxc - Linux Containers userspace tools (Python 3.x bindings)
Changes:
 lxc (2.0.6-0ubuntu1) zesty; urgency=medium
 .
   * New upstream bugfix release (2.0.6):
     - Security fix for CVE-2016-8649
     - utils: make detect_ramfs_rootfs() return bool
     - tests: add test for detect_ramfs_rootfs()
     - add Documentation entries to lxc and lxc@ units
     - mark the python examples as having utf-8 encoding
     - log: sanity check the returned value from snprintf()
     - lxc-alpine: mount /dev/shm as tmpfs
     - archlinux: Do DHCP on eth0
     - archlinux: Fix resolving
     - Drop leftover references to lxc_strerror()
     - tests: fix image download for s390x
     - tools: fix coding style in lxc_attach
     - tools: make overlay valid backend
     - tools: better error reporting for lxc-start
     - alpine: Fix installing extra packages
     - lxc-alpine: do not drop setfcap
     - s390x: Fix seccomp handling of personalities
     - tools: correct the argument typo in lxc_copy
     - Use libtool for liblxc.so
     - c/r: use --external instead of --veth-pair
     - c/r: remember to increment netnr
     - c/r: add checkpoint/restore support for macvlan interfaces
     - ubuntu: Fix package upgrades requiring proc
     - c/r: drop duplicate hunk from macvlan case
     - c/r: use snprintf to compute device name
     - Tweak libtool handling to work with Android
     - tests: add lxc_error() and lxc_debug()
     - container start: clone newcgroup immediately
     - use python3_sitearch for including the python code
     - fix rpm build, include all built files, but only once
     - cgfs: fix invalid free()
     - find OpenSUSE's build also as obs-build
     - improve help text for --fancy and --fancy-format
     - improve wording of the help page for lxc-ls
     - cgfs: add print_cgfs_init_debuginfo()
     - cgfs: skip empty entries under /proc/self/cgroup
     - cgfs: explicitly check for NULL
     - tools: use correct exit code for lxc-stop
     - c/r: explicitly emit bind mounts as criu arguments
     - log: bump LXC_LOG_BUFFER_SIZE to 4096
     - conf: merge network namespace move & rename on shutdown
     - c/r: save criu's stdout during dump too
     - c/r: remove extra \ns from logs
     - c/r: fix off-by-one error
     - c/r: check state before doing a checkpoint/restore
     - start: CLONE_NEWCGROUP after we have setup cgroups
     - create symlink for /var/run
     - utils: add lxc_append_string()
     - cgroups: remove isolated cpus from cpuset.cpus
     - Update Ubuntu release name: add zesty and remove wily
     - templates: add squashfs support to lxc-ubuntu-cloud.in
     - cgroups: skip v2 hierarchy entry
     - also stop lxc-net in runlevels 0 and 6
     - add lxc.egg-info to gitignore
     - install bash completion where pkg-config tells us to
     - conf: do not use %m format specifier
     - debian: Don't depend on libui-dialog-perl
     - cgroups: use %zu format specifier to print size_t
     - lxc-checkpoint: automatically detect if --external or --veth-pair
     - cgroups: prevent segfault in cgfsng
     - utils: add lxc_preserve_ns()
     - start: add netnsfd to lxc_handler
     - conf: use lxc_preserve_ns()
     - attach: use lxc_preserve_ns()
     - lxc_user_nic: use lxc_preserve_ns()
     - conf, start: improve log output
     - conf: explicitly remove veth device from host
     - conf, start: be smarter when deleting networks
     - start, utils: improve preserve_ns()
     - start, error: improve log + non-functional changes
     - start, namespace: move ns_info to namespace.{c,h}
     - attach, utils: bugfixes
     - attach: use ns_info[LXC_NS_MAX] struct
     - namespace: always attach to user namespace first
     - cgroup: improve isolcpus handling
     - cgroups: handle non-existent isolcpus file
     - utils: add lxc_safe_uint()
     - tests: add unit tests for lxc_safe_uint()
     - utils: add lxc_safe_int()
     - tests: add unit tests for lxc_safe_int()
     - conf/ile: get ip prefix via lxc_safe_uint()
     - confile: use lxc_safe_u/int in config_init_{u,g}id
     - conf/ile: use lxc_safe_uint() in config_pts()
     - conf/ile: use lxc_safe_u/int() in config_start()
     - conf/ile: use lxc_safe_uint() in config_monitor()
     - conf/ile: use lxc_safe_uint() in config_tty()
     - conf/ile: use lxc_safe_uint() in config_kmsg()
     - conf/ile: avoid atoi in config_lsm_aa_incomplete()
     - conf/ile: use lxc_safe_uint() in config_autodev()
     - conf/ile: avoid atoi() in config_ephemeral()
     - utils: use lxc_safe_int()
     - lxc_monitord: use lxc_safe_int() && use exit()
     - start: use lxc_safe_int()
     - conf: use lxc_safe_{u}int()
     - tools/lxc_execute: use lxc_safe_uint()
     - tools/lxc_stop: use lxc_safe_uint()
     - utils: add lxc_safe_long()
     - tests: add unit tests for lxc_safe_long()
     - tools/lxc_stop: use lxc_safe_long()
     - tools/lxc_top: use lxc_safe_int()
     - tools/lxc_ls: use lxc_safe_uint()
     - tools/lxc_autostart: use lxc_safe_{int,long}()
     - tools/lxc_console: use lxc_safe_uint()
     - tools: replace non-standard namespace identifiers
     - Configure a static MAC address on the LXC bridge
     - tests: remove overflow tests
     - attach: do not send procfd to attached process
   * Remaining patches:
     - 0001-Allocate-new-lxcbr0-subnet-at-startup-time.patch
   * Re-enable lxc-test-ubuntu on yakkety/zesty (template was fixed).
Checksums-Sha1:
 05947781db1f6685cca4c5ce44f2e971f29d2306 2542 lxc_2.0.6-0ubuntu1.dsc
 d69a6652ea0a5093337e5b5ef0d71e42f15fddfc 1300046 lxc_2.0.6.orig.tar.gz
 26b10ddcbb70e1fe7b1d313eed2879ca8a70d33a 107680 lxc_2.0.6-0ubuntu1.debian.tar.xz
Checksums-Sha256:
 9a08f78f57a713c4002ef2e34e5db3728deabed404d53ed3e23f79e0ebd4a012 2542 lxc_2.0.6-0ubuntu1.dsc
 7c292cd0055dac1a0e6fbb6a7740fd12b6ffb204603c198faf37c11c9d6dcd7a 1300046 lxc_2.0.6.orig.tar.gz
 2ce02c9c54a0d7d706f0e4eab5ae23225ffac4e63dbcd3118c6fdc0d8db8bd47 107680 lxc_2.0.6-0ubuntu1.debian.tar.xz
Files:
 52f53cf9ed93efca62fe77a0714d0989 2542 admin optional lxc_2.0.6-0ubuntu1.dsc
 5fd4b7af8026e8ae20b3065ee18fe974 1300046 admin optional lxc_2.0.6.orig.tar.gz
 aff2093c558ea027f3f09a13e44ed4b9 107680 admin optional lxc_2.0.6-0ubuntu1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=tMue
-----END PGP SIGNATURE-----

More information about the Zesty-changes mailing list