Format: 1.8 Date: Thu, 18 May 2017 23:08:57 -0400 Source: lxc Binary: lxc lxc1 lxc-common lxc-dev lxc-templates lxc-tests liblxc1 python3-lxc lua-lxc Architecture: powerpc Version: 2.0.8-0ubuntu1~16.04.1 Distribution: xenial-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Stéphane Graber Description: liblxc1 - Linux Containers userspace tools (library) lua-lxc - Linux Containers userspace tools (Lua bindings) lxc - Transitional package for lxc1 lxc-common - Linux Containers userspace tools (common tools) lxc-dev - Linux Containers userspace tools (development) lxc-templates - Linux Containers userspace tools (templates) lxc-tests - Linux Containers userspace tools (test binaries) lxc1 - Linux Containers userspace tools python3-lxc - Linux Containers userspace tools (Python 3.x bindings) Launchpad-Bugs-Fixed: 1691911 Changes: lxc (2.0.8-0ubuntu1~16.04.1) xenial; urgency=medium . * New upstream bugfix release (2.0.8) (LP: #1691911): - Security fix for CVE-2017-5985 (previously fixed in Ubuntu) . - All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users. . This may affect some automated environments that were relying on our default (very much insecure) users. . - Make lxc-start-ephemeral Python 3.2-compatible - Fix typo - Allow build without sys/capability.h - lxc-opensuse: fix default value for release code - util: always malloc for setproctitle - util: update setproctitle comments - confile: clear lxc.network..ipv{4,6} when empty - lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals - Make lxc-net return non-zero on failure - seccomp: allow x32 guests on amd64 hosts. - Add HAVE_LIBCAP - c/r: only supply --ext-mount-map for bind mounts - Added 'mkdir -p' functionality in create_or_remove_cgroup - Use LXC_ROOTFS_MOUNT in clonehostname hook - squeeze is not a supported release anymore, drop the key - start: dumb down SIGCHLD from WARN() to NOTICE() - log: fix lxc_unix_epoch_to_utc() - cgfsng: make trim() safer - seccomp: set SCMP_FLTATR_ATL_TSKIP if available - lxc-user-nic: re-order #includes - lxc-user-nic: improve + bugfix - lxc-user-nic: delete link on failure - conf: only try to delete veth when privileged - Fix lxc-containers to support multiple bridges - Fix mixed tab/spaces in previous patch - lxc-alpine: use dl-cdn.a.o as default mirror instead of random one - lxc-checkconfig: verify new[ug]idmap are setuid-root - [templates] archlinux: resolve conflicting files - [templates] archlinux: noneed default_timezone variable - python3: Deal with potential NULL char* - lxc-download.in / allow setting keyserver from env - lxc-download.in / Document keyserver change in help - Change variable check to match existing style - tree-wide: include directly - conf/ile: make sure buffer is large enough - tree-wide: include directly - tests: Support running on IPv6 networks - tests: Kill containers (don't wait for shutdown) - Fix opening wrong file in suggest_default_idmap - do not set the root password in the debian template - do not set insecure passwords - don't set a default password for altlinux, gentoo, openmandriva and pld - tools: exit with return code of lxc_execute() - Keep veth.pair.name on network shutdown - Makefile: fix static clang init.lxc build - Avoid waiting for bridge interface if disabled in sysconfig/lxc - Increased buffer length in print_stats() - avoid assigning to a variable which is not POSIX shell proof (bug #1498) - remove obsolete note about api stability - conf: less error prone pointer access - conf: lxc_map_ids() non-functional changes - caps: add lxc_{proc,file}_cap_is_set() - conf: check for {filecaps,setuid} on new{g,u}idmap - conf: improve log when mounting rootfs - ls: simplify the judgment condition when list active containers - fix typo introduced in #1509 - attach|unshare: fix the wrong comment - caps: skip file capability checks on android - autotools: check for cap_get_file - caps: return false if caps are not supported - conf: non-functional changes to setup_pts() - conf: use bind-mount for /dev/ptmx - conf: non-functional changes - utils: use loop device helpers from LXD - create ISSUE_TEMPLATE.md - cgroups: improve cgfsng debugging - issue template: fix typo - conf: close fd in lxc_setup_devpts() - conf: non-functional changes - utils: tweak lxc_mount_proc_if_needed() - Change sshd template to work with Ubuntu 17.04 - conf: order mount options - conf: add MS_LAZYTIME to mount options - monitor: report errno on exec() error - af unix: allow for maximum socket name - commands: avoid NULL pointer dereference - commands: non-functional changes - lxccontainer: avoid NULL pointer dereference - monitor: simplify abstract socket logic - precise is not the latest LTS, let's use xenial instead - fix the wrong exit status - conf: non-functional changes lxc_fill_autodev() - conf: remove /dev/console from lxc_fill_autodev() - conf: non-functional changes lxc_setup() - conf: non-functional changes to console functions - conf: improve lxc_setup_dev_console() - conf: lxc_setup_ttydir_console() - config: remove /dev/console bind mount - doc: document console behavior - utils: add lxc_unstack_mountpoint() - conf: unstack all mounts atop /dev/console - console: fail when we cannot allocate peer tty - start: remove umount2() - conf: non-functional changes - utils: handle > 2^31 in lxc_unstack_mountpoint() - Install systemd units for CentOS - Merge ubuntu and debiancase - start: add crucial details about lxc_spawn() . * Cherry-pick some upstream fixes: - conf{,ile}: allow one to clear all config items - start: pin rootfs when privileged - conf: fix build without libcap - start: don't call lxc_map_ids() without id map - lxc-attach: allow for situations without /dev/tty - utils: fix num parsing functions - tests: lxc_safe_{u}int() add corner-case tests . * Fix broken proxy detection in debian/tests/exercise * Only move lxc bash completion from /etc if we installed it there * Update tests to deal with cgroupv2 tree (recent systemd) * Drop un-needed lintian override Checksums-Sha1: 0f9ada854270fa61a079ca731aaaddf47fb51fe7 454218 liblxc1-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 6800af125414d0d62602a731d7a9025a73b927ed 191194 liblxc1_2.0.8-0ubuntu1~16.04.1_powerpc.deb b262ec31a8a2602593ceafc3693a6923a75dce8f 12062 lua-lxc-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 90ab1264844425f2ba87443bec27a1f3efdb6496 9620 lua-lxc_2.0.8-0ubuntu1~16.04.1_powerpc.deb 286a2f4f3add82db1ffaee5d7e44ebdc93eda04d 44486 lxc-common-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb d51590b06bdfd12f2f9434f7b7ab3b13fac1f980 27396 lxc-common_2.0.8-0ubuntu1~16.04.1_powerpc.deb c35d072503d40d6171960df5edf4baa3c044f74a 11364 lxc-dev_2.0.8-0ubuntu1~16.04.1_powerpc.deb 06ed022031cd76d1082602d401bf61bf74fce6e1 6284 lxc-templates-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 2f1fc3a746d62f9576ae2f96211b8ed552ebe29b 82424 lxc-templates_2.0.8-0ubuntu1~16.04.1_powerpc.deb ec2211713efe8539c8de1bf3fdc25613b662c45a 74654 lxc-tests-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb e6855a1f7e32f78d98ec4748063e2adf7f26e195 45570 lxc-tests_2.0.8-0ubuntu1~16.04.1_powerpc.deb 5690007dbe133e318e17a127b63bf75c9cc7b33d 216340 lxc1-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 7abc0254ebd83deed934eee1a3dba6025ade104f 523290 lxc1_2.0.8-0ubuntu1~16.04.1_powerpc.deb 66c22f781281dccd97664ec34a7a3388443b5a86 18566 python3-lxc_2.0.8-0ubuntu1~16.04.1_powerpc.deb Checksums-Sha256: a22a9b6e85b20adf9730f60e0dac7504eb28452669d67d4fb26560270d902259 454218 liblxc1-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb ea8285565c3b07d13daf79530d5d60a4cd3f7894d03092ebacd42f3ad21e6bbf 191194 liblxc1_2.0.8-0ubuntu1~16.04.1_powerpc.deb 65909c8d39b0a0bc16b9fadda36d03a7a1c844480539f39c117a862565b43a43 12062 lua-lxc-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 56b6aae826a7c1199e47ce4c1ee1e806c05eed7bdb9788cfcc31577711c45b4b 9620 lua-lxc_2.0.8-0ubuntu1~16.04.1_powerpc.deb cfde9cd369ad30c26bbbd167d405c10aa99981bf1956656c3300db99d22534e5 44486 lxc-common-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 1bf14baa260bd6946dcea5c8eabfeb4c495bbed989c6ad00d186b763a9e2658d 27396 lxc-common_2.0.8-0ubuntu1~16.04.1_powerpc.deb 24aa4e9c71ce8826ea600abc13ea7b1108ff264dd4ffe1b33b7a13e80dcceeef 11364 lxc-dev_2.0.8-0ubuntu1~16.04.1_powerpc.deb 8254c6cc2e550db0fb1a2f81bc8555419f8f8a1e752cbf7faacfc0e4292d4fd8 6284 lxc-templates-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 954b2f7be0bdf598ac4074c96f2d951e05343bfc0007b869cc881b828d68d4f3 82424 lxc-templates_2.0.8-0ubuntu1~16.04.1_powerpc.deb 10ecda1795396a546ba3d616eca5a964253caf73e0de8bd0af563e8b562273bc 74654 lxc-tests-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb d279e173bb8aba121586ace537d8bb3652372e803872de0c3e35c326df42dfcd 45570 lxc-tests_2.0.8-0ubuntu1~16.04.1_powerpc.deb 4bff27c989e85b6faa84dff817451d7f1282ac2bac11e53dfcce0ff634c7e927 216340 lxc1-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 07871e1eec794020951d864ea659d837650929e3e546cb25ed374f19d21d59e5 523290 lxc1_2.0.8-0ubuntu1~16.04.1_powerpc.deb 84b3f4132c33028566fe61dc13b7bb67fbed42d6996e902f56109c26a3fc8878 18566 python3-lxc_2.0.8-0ubuntu1~16.04.1_powerpc.deb Files: 9d23e3f93c7a8a71778c38ced0600b02 454218 admin extra liblxc1-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb ca153affcced127493f2f858844f6665 191194 admin optional liblxc1_2.0.8-0ubuntu1~16.04.1_powerpc.deb 7432397d6b8baa6f403e2b3e03171251 12062 interpreters extra lua-lxc-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 412433066568750725662ef6ff5df7be 9620 interpreters optional lua-lxc_2.0.8-0ubuntu1~16.04.1_powerpc.deb fb7b2485e56760c37fef99d7d21d52bc 44486 admin extra lxc-common-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 7bddc7a387c6b4d6bdafb1e77a4acc36 27396 admin optional lxc-common_2.0.8-0ubuntu1~16.04.1_powerpc.deb 3dbada72a8d03503b97e5e2989e6dbf0 11364 libdevel optional lxc-dev_2.0.8-0ubuntu1~16.04.1_powerpc.deb 1ddd6f7ad3d47d8cd0286f2b711f9ee2 6284 admin extra lxc-templates-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 5239d81a0f6d610faa60e94423f468f4 82424 admin optional lxc-templates_2.0.8-0ubuntu1~16.04.1_powerpc.deb 42dbf50c840bcc556ffce2189ca67359 74654 admin extra lxc-tests-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 8b1589605605cae8d838c63a6b07f931 45570 admin optional lxc-tests_2.0.8-0ubuntu1~16.04.1_powerpc.deb 5a5b1f8d1f1ac3f1dae47f777b2a70c4 216340 admin extra lxc1-dbgsym_2.0.8-0ubuntu1~16.04.1_powerpc.ddeb 091e5185e50caaf467cdd15e244a2ab4 523290 admin optional lxc1_2.0.8-0ubuntu1~16.04.1_powerpc.deb 369b1737a2bfce31ddea3879cac16429 18566 python optional python3-lxc_2.0.8-0ubuntu1~16.04.1_powerpc.deb