Accepted lxc 1:1.0.6-6+deb8u2 (source amd64) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 13 Nov 2015 09:53:32 -0200
Source: lxc
Binary: lxc lxc-dbg
Architecture: source amd64
Version: 1:1.0.6-6+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Daniel Baumann <mail@daniel-baumann.ch>
Changed-By: Antonio Terceiro <terceiro@debian.org>
Description:
lxc - Linux Containers userspace tools
lxc-dbg - Linux Containers userspace tools (debug)
Closes: 800471
Changes:
lxc (1:1.0.6-6+deb8u2) jessie-security; urgency=high
.
* CVE-2015-1335: prevent local containment administrator from escaping
container via symlink attack. (Closes: #800471). Also include 2 followup
patches that fixed regressions in the original fix. Patches obtained from
the Ubuntu package:
- 0020-CVE-2015-1335.patch
- 0021-CVE-2015-1335-2.patch
- 0022-CVE-2015-1335-3.patch
Checksums-Sha1:
1d721f41e24e528d52d60bb97d67a5846da8545d 2082 lxc_1.0.6-6+deb8u2.dsc
8051af53c88c44d30acc929b6564bae9c3026a0a 34740 lxc_1.0.6-6+deb8u2.debian.tar.xz
cc47ed13785d245ed00c917f55b8d0de019188e4 625704 lxc_1.0.6-6+deb8u2_amd64.deb
e594f323869260cb55beb7e86c77a3a52ddd5c15 772058 lxc-dbg_1.0.6-6+deb8u2_amd64.deb
Checksums-Sha256:
4b22c3081ef4c52da7c21d3e2d70f05ccbab8a2807461961b44ab73dd23335f0 2082 lxc_1.0.6-6+deb8u2.dsc
54a4641866ebd4afcc1d18607be68cca8c71f4ee9f3230a6741757bdc3695d2d 34740 lxc_1.0.6-6+deb8u2.debian.tar.xz
f5641f8490343fc37a304e07e7da3cfd0c766dbb04043625290002794bcfff42 625704 lxc_1.0.6-6+deb8u2_amd64.deb
9d9fd20f3f00bd0d90ab0a6f56862af22ca80ff5e4e997ebd08bf105271a26a8 772058 lxc-dbg_1.0.6-6+deb8u2_amd64.deb
Files:
343009c9a6a98f1eee3d0168066a4116 2082 admin optional lxc_1.0.6-6+deb8u2.dsc
88ed64895d0431816f3cac18114cc1ad 34740 admin optional lxc_1.0.6-6+deb8u2.debian.tar.xz
e21945dc53b2635389cade78607ab40b 625704 admin optional lxc_1.0.6-6+deb8u2_amd64.deb
469a7a249c7e4d3021f2a41229d4b5ac 772058 debug extra lxc-dbg_1.0.6-6+deb8u2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=vCKk
-----END PGP SIGNATURE-----