SRU of LXC 3.0.2 (upstream bugfix release)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lxc (Ubuntu) |
Fix Released
|
High
|
Stéphane Graber | ||
Xenial |
Fix Released
|
High
|
Stéphane Graber | ||
Bionic |
Fix Released
|
High
|
Stéphane Graber | ||
Cosmic |
Fix Released
|
High
|
Stéphane Graber |
Bug Description
LXC upstream released LXC 3.0.2 as a bugfix release with following changelog:
- CVE 2018-6556: verify netns fd in lxc-user-nic
- fixed a range of bugs found by Coverity
- lxc-usernsexec: cleanup and bugfixes
- log: add CMD_SYSINFO()
- log: add CMD_SYSERROR()
- state: s/sleep(
- lxclock: improve file locking
- lxccontainer: improve file locking
- lxccontainer: fix F_OFD_GETLK checks
- netlink: add __netlink_
- netns: allocate network namespace id
- MAINTAINERS: add Wolfgang Bumiller
- pam_cgfs: cleanups
- log: add default log priority
- tree-wide: pass unsigned long to prctl()
- macro: add new macro header
- conf: mount devpts without “max” on EINVAL
- tree-wide: handle EINTR in read() and write()
- tree-wide: replace pipe() with pipe2()
- confile: split mount options into flags and data
- conf: improve rootfs setup
- autotools: default to -Wvla -std=gnu11
- tree-wide: remove VLAs
- tree-wide: replace strtok_r() with lxc_iterate_parts()
- utils: add lxc_iterate_parts()
- apparmor: allow start-container to change to lxc-**
- apparmor: update current profiles
- apparmor: Allow /usr/lib* paths for mount and pivot_root
- conf: the atime flags are locked in userns
- conf: handle partially functional device nodes
- conf: create /dev directory
- autotools: build both a shared and static liblxc
- namespace: add api to convert namespaces to standard identifiers
- tree-wide: set MSG_NOSIGNAL
- tree-wide: use mknod() to create dummy files
- cgfsng: respect lxc.cgroup.use
- cgroups: remove is_crucial_
- tree-wide: remove unneeded log prefixes
- tests: cleanup all tests
- terminal: set FD_CLOEXEC on pty file descriptors
- conf: simplify lxc_setup_
- tools: rework tools
- autodev: adapt to changes in Linux 4.18
- log: change DEBUG, INFO, TRACE, NOTICE macro using strerror to SYS* macro
- log: add lxc_log_strerror_r macro
- network: unpriv lxc will run lxc.net.
- conf: only use newuidmap and newgidmap when necessary
- autotools: support tls in cross-compile
Just like Ubuntu itself, upstream releases long term support releases, as is 3.0 and then periodic point releases including all the accumulated bugfixes.
Only the latest upstream release gets full support from the upstream developers, everyone else is expected to first update to it before receiving any kind of support.
This should qualify under the minor upstream bugfix release allowance of the SRU policy, letting us SRU this without paperwork for every single change included in this upstream release.
Once the SRU hits -updates, we will be backporting this to xenial-backports as well, making sure we have the same version everywhere.
[Test case]
lxc has autopkgtests which will assert that the binaries built in -proposed are functional.
Changed in lxc (Ubuntu Xenial): | |
status: | New → Triaged |
Changed in lxc (Ubuntu Bionic): | |
status: | New → Triaged |
Changed in lxc (Ubuntu Cosmic): | |
status: | New → Triaged |
Changed in lxc (Ubuntu Xenial): | |
importance: | Undecided → High |
Changed in lxc (Ubuntu Bionic): | |
importance: | Undecided → High |
Changed in lxc (Ubuntu Cosmic): | |
importance: | Undecided → High |
Changed in lxc (Ubuntu Xenial): | |
assignee: | nobody → Stéphane Graber (stgraber) |
Changed in lxc (Ubuntu Bionic): | |
assignee: | nobody → Stéphane Graber (stgraber) |
Changed in lxc (Ubuntu Cosmic): | |
assignee: | nobody → Stéphane Graber (stgraber) |
status: | Triaged → In Progress |
Changed in lxc (Ubuntu Xenial): | |
status: | Triaged → Fix Released |
This bug was fixed in the package lxc - 3.0.2-0ubuntu4
---------------
lxc (3.0.2-0ubuntu4) cosmic; urgency=medium
* Cherry-pick upstream fixes: return- 1-on-lxc_ cmd_get_ init_pid- err.patch
- 0024-commands-
-- Stéphane Graber <email address hidden> Sat, 25 Aug 2018 00:49:17 -0400