Activity log for bug #1946899

Date Who What changed Old value New value Message
2021-10-13 04:06:51 Bryce Harrington bug added bug
2021-10-13 04:06:53 Bryce Harrington bug added subscriber Canonical Server Team
2021-10-14 15:18:24 Lucas Kanashiro runc (Ubuntu): assignee Lucas Kanashiro (lucaskanashiro)
2021-10-19 04:35:37 Bryce Harrington description Scheduled-For: 22.12 Upstream: tbd Debian: 1.0.2+ds1-2 1.0.2+ds1-1 Ubuntu: 1.0.1-0ubuntu2 Debian new has 1.0.2+ds1-1 ### New Debian Changes ### runc (1.0.2+ds1-2) unstable; urgency=medium * Team upload. * Bump golang-github-checkpoint-restore-go-criu-dev to 5.1.0 * Drop golang-github-willf-bitset-dev from Depends * Remove compatible patch for podman -- Shengjing Zhu <zhsj@debian.org> Mon, 11 Oct 2021 01:12:21 +0800 runc (1.0.2+ds1-1) unstable; urgency=medium * Team upload. * New upstream version 1.0.2+ds1 * Bump golang-github-coreos-go-systemd-dev to 22.3.2 -- Shengjing Zhu <zhsj@debian.org> Mon, 23 Aug 2021 19:02:58 +0800 runc (1.0.1+ds1-2) unstable; urgency=medium * Team upload. * Upload to unstable * Bump golang-github-opencontainers-specs-dev to 1.0.2.66 (Closes: #990820) * Update Standards-Version to 4.6.0 (no changes) -- Shengjing Zhu <zhsj@debian.org> Fri, 20 Aug 2021 23:39:49 +0800 runc (1.0.1+ds1-1) experimental; urgency=medium * New upstream version 1.0.1+ds1 * Add patch to add back deprecated alias * Bump golang-github-cilium-ebpf-dev to 0.6.2 -- Shengjing Zhu <zhsj@debian.org> Fri, 16 Jul 2021 23:15:56 +0800 runc (1.0.0+ds1-1) experimental; urgency=medium * Team upload. * New upstream version 1.0.0+ds1 * Bump golang-github-cilium-ebpf-dev to 0.6.1 -- Shengjing Zhu <zhsj@debian.org> Tue, 22 Jun 2021 15:32:16 +0800 runc (1.0.0~rc95.86.g2f8e8e9d+ds1-1) experimental; urgency=medium * Team upload. * New upstream version 1.0.0~rc95.86.g2f8e8e9d+ds1 -- Shengjing Zhu <zhsj@debian.org> Sun, 06 Jun 2021 00:56:37 +0800 runc (1.0.0~rc94+ds1-2) experimental; urgency=medium * Team upload. * Backport patch for CVE-2021-30465 (Closes: #988768) -- Shengjing Zhu <zhsj@debian.org> Wed, 19 May 2021 19:48:48 +0800 runc (1.0.0~rc94+ds1-1) experimental; urgency=medium * Team upload. * New upstream version 1.0.0~rc94+ds1 * Add patch for go-systemd 22.1.0 compatibility -- Shengjing Zhu <zhsj@debian.org> Wed, 12 May 2021 23:54:20 +0800 runc (1.0.0~rc93.144.g6538f9f2+ds1-1) experimental; urgency=medium * Team upload. * New upstream trunk version 1.0.0~rc93.144.g6538f9f2+ds1 Fix `runc init` stuck when system is under heavy load. * Revert bump of go-criu to v5 * No longer needs skopeo and umoci for autopkgtest -- Shengjing Zhu <zhsj@debian.org> Sat, 03 Apr 2021 00:46:22 +0800 runc (1.0.0~rc93+ds1-2) unstable; urgency=medium * Team upload. * Drop compatibility patch. No longer used * Skip one integration test when no /dev/kmsg in testbed -- Shengjing Zhu <zhsj@debian.org> Mon, 08 Feb 2021 19:00:36 +0800 runc (1.0.0~rc93+ds1-1) unstable; urgency=medium * Team upload. * New upstream version 1.0.0~rc93+ds1 -- Shengjing Zhu <zhsj@debian.org> Thu, 04 Feb 2021 11:05:23 +0800 runc (1.0.0~rc92.425.g7e3c3e8c+ds1-1) experimental; urgency=medium * Team upload. * Add umoci to test control * New upstream version 1.0.0~rc92.425.g7e3c3e8c+ds1 * Add golang-golang-x-net-dev to Build-Depends -- Shengjing Zhu <zhsj@debian.org> Wed, 03 Feb 2021 14:51:28 +0800 runc (1.0.0~rc92.372.gc69ae759+ds1-1) experimental; urgency=medium ### Old Ubuntu Delta ### runc (1.0.1-0ubuntu2) impish; urgency=medium * d/p/test--skip-fs-related-cgroups-tests.patch: skip a new cgroups related test. It requires permission to write in /sys/fs/cgroup/memory during its execution. -- Lucas Kanashiro <kanashiro@ubuntu.com> Mon, 09 Aug 2021 11:40:32 -0300 runc (1.0.1-0ubuntu1) impish; urgency=medium * New upstream release. * d/watch: adjust regex to correctly match the tarball files on Github. * d/p/test--skip-fs-related-cgroups-tests.patch: update according to the upstream changes. * d/s/lintian-overrides: remove it, the override there is not needed. -- Lucas Kanashiro <kanashiro@ubuntu.com> Thu, 05 Aug 2021 11:48:36 -0300 runc (1.0.0~rc95-0ubuntu1) impish; urgency=medium * New upstream release. - Several regressions were found in 1.0.0-rc93 by upstream and fixed in this new release. + Ensure the scratch pipe is read during ExportBPF (LP: #1927219). - Drop patches applied by upstream: + d/patches/CVE-2021-30465/*.patch + d/patches/fix-patchpbf-test-on-32-bit.patch * d/rules: set VERSION variable when building runc (LP: #1929106). -- Lucas Kanashiro <kanashiro@ubuntu.com> Thu, 20 May 2021 10:40:14 -0300 runc (1.0.0~rc93-0ubuntu2) impish; urgency=medium * SECURITY UPDATE: symlink exchange attack - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount destination validation. - CVE-2021-30465 -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 05 May 2021 14:27:26 -0400 runc (1.0.0~rc93-0ubuntu1) hirsute; urgency=medium * New upstream release (LP: #1919182). - runc now has special handling for seccomp profiles to avoid making new syscalls unusable for glibc (LP: #1916485). * Remove patch addressing a bug fixed by upstream: - debian/patches/test--fix_TestGetAdditionalGroups.patch * Refresh patch: - debian/patches/test--skip-fs-related-cgroups-test.patch * Backport upstream patch to fix patchpbf test on armhf: - debian/patches/fix-patchpbf-test-on-32-bit.patch -- Lucas Kanashiro <kanashiro@ubuntu.com> Tue, 10 Mar 2021 09:30:36 -0300 runc (1.0.0~rc92-0ubuntu1) hirsute; urgency=medium * New upstream release. * Refresh patches. * Add patch to skip tests relying on cgroups fs mountpoints. * Update VCS links to point to Github where the packaging work is done. -- Lucas Kanashiro <kanashiro@ubuntu.com> Tue, 12 Jan 2021 17:30:36 -0300 runc (1.0.0~rc10-0ubuntu3) hirsute; urgency=medium * No-change rebuild using new golang -- Steve Langasek <steve.langasek@ubuntu.com> Wed, 11 Nov 2020 22:25:13 +0000 runc (1.0.0~rc10-0ubuntu2) groovy; urgency=medium * No-change rebuild using new golang -- Steve Langasek <steve.langasek@ubuntu.com> Tue, 22 Sep 2020 08:55:00 +0000 runc (1.0.0~rc10-0ubuntu1) focal; urgency=medium [ Lucas Kanashiro ] * Run dh_golang_autopkgtest with isolation-machine restriction (LP: #1856083) - d/control: remove Testsuite field since we are now overwriting the autodep8 test definition. - d/t/control: overwrite autodep8 test definition to add isolation-machine restriction. * d/t/control: Use commas in Restrictions field of basic-smoke test [ Tianon Gravi ] * Update to 1.0.0-rc10 upstream release -- Tianon Gravi <tianon@debian.org> Tue, 18 Feb 2020 09:06:24 +1300 runc (1.0.0~rc8+git20190923.3e425f80-0ubuntu1) eoan; urgency=medium * New upstream snapshot, fixing CVE-2019-16884. -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Mon, 30 Sep 2019 14:12:18 +1300 runc (1.0.0~rc8-0ubuntu1) eoan; urgency=medium * New upstream version. -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Wed, 18 Sep 2019 10:49:47 +0200 runc (1.0.0~rc7+git20190403.029124da-0ubuntu1) disco; urgency=medium * New upstream version. * Fix dependencies of golang-github-opencontainers-runc-dev package. -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Fri, 12 Apr 2019 12:29:03 +1200 runc (1.0.0~rc6+git20190307.2b18fe1d-0ubuntu1) disco; urgency=medium * Update to https://github.com/opencontainers/runc/commit/2b18fe1d885ee5083ef9f0838fee39b62d653e30 - See also: https://github.com/containerd/containerd/blob/v1.2.5/RUNC.md https://github.com/containerd/containerd/blob/v1.2.5/vendor.conf#L23 * d/patches/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch: dropped, applied upstream. -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Thu, 14 Mar 2019 11:12:22 +1300 runc (1.0.0~rc6+git20181203.96ec2177-0ubuntu1) disco; urgency=medium * Add 'basic-smoke' autopkgtest to verify basic functionality -- Tianon Gravi <tianon@debian.org> Thu, 14 Feb 2019 14:23:13 -0800 runc (1.0.0~rc6+git20181203.96ec2177-0~ubuntu2) disco; urgency=medium * d/patches/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch: Apply upstream fix for CVE-2019-5736. -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Tue, 12 Feb 2019 11:52:37 +1300 runc (1.0.0~rc6+git20181203.96ec2177-0~ubuntu1) disco; urgency=medium * Update to https://github.com/opencontainers/runc/commit/96ec2177ae841256168fcf76954f7177af9446eb - See also: https://github.com/containerd/containerd/blob/v1.2.2/RUNC.md https://github.com/containerd/containerd/blob/v1.2.2/vendor.conf#L23 -- Tianon Gravi <tianon@debian.org> Thu, 17 Jan 2019 21:06:43 -0800 Upstream: tbd Debian: 1.0.2+ds1-2 1.0.2+ds1-1 Ubuntu: 1.0.1-0ubuntu2 Debian new has 1.0.2+ds1-1 ### New Debian Changes ### runc (1.0.2+ds1-2) unstable; urgency=medium   * Team upload.   * Bump golang-github-checkpoint-restore-go-criu-dev to 5.1.0   * Drop golang-github-willf-bitset-dev from Depends   * Remove compatible patch for podman  -- Shengjing Zhu <zhsj@debian.org> Mon, 11 Oct 2021 01:12:21 +0800 runc (1.0.2+ds1-1) unstable; urgency=medium   * Team upload.   * New upstream version 1.0.2+ds1   * Bump golang-github-coreos-go-systemd-dev to 22.3.2  -- Shengjing Zhu <zhsj@debian.org> Mon, 23 Aug 2021 19:02:58 +0800 runc (1.0.1+ds1-2) unstable; urgency=medium   * Team upload.   * Upload to unstable   * Bump golang-github-opencontainers-specs-dev to 1.0.2.66 (Closes: #990820)   * Update Standards-Version to 4.6.0 (no changes)  -- Shengjing Zhu <zhsj@debian.org> Fri, 20 Aug 2021 23:39:49 +0800 runc (1.0.1+ds1-1) experimental; urgency=medium   * New upstream version 1.0.1+ds1   * Add patch to add back deprecated alias   * Bump golang-github-cilium-ebpf-dev to 0.6.2  -- Shengjing Zhu <zhsj@debian.org> Fri, 16 Jul 2021 23:15:56 +0800 runc (1.0.0+ds1-1) experimental; urgency=medium   * Team upload.   * New upstream version 1.0.0+ds1   * Bump golang-github-cilium-ebpf-dev to 0.6.1  -- Shengjing Zhu <zhsj@debian.org> Tue, 22 Jun 2021 15:32:16 +0800 runc (1.0.0~rc95.86.g2f8e8e9d+ds1-1) experimental; urgency=medium   * Team upload.   * New upstream version 1.0.0~rc95.86.g2f8e8e9d+ds1  -- Shengjing Zhu <zhsj@debian.org> Sun, 06 Jun 2021 00:56:37 +0800 runc (1.0.0~rc94+ds1-2) experimental; urgency=medium   * Team upload.   * Backport patch for CVE-2021-30465 (Closes: #988768)  -- Shengjing Zhu <zhsj@debian.org> Wed, 19 May 2021 19:48:48 +0800 runc (1.0.0~rc94+ds1-1) experimental; urgency=medium   * Team upload.   * New upstream version 1.0.0~rc94+ds1   * Add patch for go-systemd 22.1.0 compatibility  -- Shengjing Zhu <zhsj@debian.org> Wed, 12 May 2021 23:54:20 +0800 runc (1.0.0~rc93.144.g6538f9f2+ds1-1) experimental; urgency=medium   * Team upload.   * New upstream trunk version 1.0.0~rc93.144.g6538f9f2+ds1     Fix `runc init` stuck when system is under heavy load.   * Revert bump of go-criu to v5   * No longer needs skopeo and umoci for autopkgtest  -- Shengjing Zhu <zhsj@debian.org> Sat, 03 Apr 2021 00:46:22 +0800 runc (1.0.0~rc93+ds1-2) unstable; urgency=medium   * Team upload.   * Drop compatibility patch.     No longer used   * Skip one integration test when no /dev/kmsg in testbed  -- Shengjing Zhu <zhsj@debian.org> Mon, 08 Feb 2021 19:00:36 +0800 runc (1.0.0~rc93+ds1-1) unstable; urgency=medium   * Team upload.   * New upstream version 1.0.0~rc93+ds1  -- Shengjing Zhu <zhsj@debian.org> Thu, 04 Feb 2021 11:05:23 +0800 runc (1.0.0~rc92.425.g7e3c3e8c+ds1-1) experimental; urgency=medium   * Team upload.   * Add umoci to test control   * New upstream version 1.0.0~rc92.425.g7e3c3e8c+ds1   * Add golang-golang-x-net-dev to Build-Depends  -- Shengjing Zhu <zhsj@debian.org> Wed, 03 Feb 2021 14:51:28 +0800 runc (1.0.0~rc92.372.gc69ae759+ds1-1) experimental; urgency=medium ### Old Ubuntu Delta ### runc (1.0.1-0ubuntu2) impish; urgency=medium   * d/p/test--skip-fs-related-cgroups-tests.patch: skip a new cgroups related     test. It requires permission to write in /sys/fs/cgroup/memory during its     execution.  -- Lucas Kanashiro <kanashiro@ubuntu.com> Mon, 09 Aug 2021 11:40:32 -0300 runc (1.0.1-0ubuntu1) impish; urgency=medium   * New upstream release.   * d/watch: adjust regex to correctly match the tarball files on Github.   * d/p/test--skip-fs-related-cgroups-tests.patch: update according to the     upstream changes.   * d/s/lintian-overrides: remove it, the override there is not needed.  -- Lucas Kanashiro <kanashiro@ubuntu.com> Thu, 05 Aug 2021 11:48:36 -0300 runc (1.0.0~rc95-0ubuntu1) impish; urgency=medium   * New upstream release.     - Several regressions were found in 1.0.0-rc93 by upstream and fixed in       this new release.       + Ensure the scratch pipe is read during ExportBPF (LP: #1927219).     - Drop patches applied by upstream:       + d/patches/CVE-2021-30465/*.patch       + d/patches/fix-patchpbf-test-on-32-bit.patch   * d/rules: set VERSION variable when building runc (LP: #1929106).  -- Lucas Kanashiro <kanashiro@ubuntu.com> Thu, 20 May 2021 10:40:14 -0300 runc (1.0.0~rc93-0ubuntu2) impish; urgency=medium   * SECURITY UPDATE: symlink exchange attack     - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount       destination validation.     - CVE-2021-30465  -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 05 May 2021 14:27:26 -0400 runc (1.0.0~rc93-0ubuntu1) hirsute; urgency=medium   * New upstream release (LP: #1919182).     - runc now has special handling for seccomp profiles to avoid making new       syscalls unusable for glibc (LP: #1916485).   * Remove patch addressing a bug fixed by upstream:     - debian/patches/test--fix_TestGetAdditionalGroups.patch   * Refresh patch:     - debian/patches/test--skip-fs-related-cgroups-test.patch   * Backport upstream patch to fix patchpbf test on armhf:     - debian/patches/fix-patchpbf-test-on-32-bit.patch  -- Lucas Kanashiro <kanashiro@ubuntu.com> Tue, 10 Mar 2021 09:30:36 -0300 runc (1.0.0~rc92-0ubuntu1) hirsute; urgency=medium   * New upstream release.   * Refresh patches.   * Add patch to skip tests relying on cgroups fs mountpoints.   * Update VCS links to point to Github where the packaging work is done.  -- Lucas Kanashiro <kanashiro@ubuntu.com> Tue, 12 Jan 2021 17:30:36 -0300 runc (1.0.0~rc10-0ubuntu3) hirsute; urgency=medium   * No-change rebuild using new golang  -- Steve Langasek <steve.langasek@ubuntu.com> Wed, 11 Nov 2020 22:25:13 +0000 runc (1.0.0~rc10-0ubuntu2) groovy; urgency=medium   * No-change rebuild using new golang  -- Steve Langasek <steve.langasek@ubuntu.com> Tue, 22 Sep 2020 08:55:00 +0000 runc (1.0.0~rc10-0ubuntu1) focal; urgency=medium   [ Lucas Kanashiro ]   * Run dh_golang_autopkgtest with isolation-machine restriction (LP: #1856083)     - d/control: remove Testsuite field since we are now overwriting the       autodep8 test definition.     - d/t/control: overwrite autodep8 test definition to add isolation-machine       restriction.   * d/t/control: Use commas in Restrictions field of basic-smoke test   [ Tianon Gravi ]   * Update to 1.0.0-rc10 upstream release  -- Tianon Gravi <tianon@debian.org> Tue, 18 Feb 2020 09:06:24 +1300 runc (1.0.0~rc8+git20190923.3e425f80-0ubuntu1) eoan; urgency=medium   * New upstream snapshot, fixing CVE-2019-16884.  -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Mon, 30 Sep 2019 14:12:18 +1300 runc (1.0.0~rc8-0ubuntu1) eoan; urgency=medium   * New upstream version.  -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Wed, 18 Sep 2019 10:49:47 +0200 runc (1.0.0~rc7+git20190403.029124da-0ubuntu1) disco; urgency=medium   * New upstream version.   * Fix dependencies of golang-github-opencontainers-runc-dev package.  -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Fri, 12 Apr 2019 12:29:03 +1200 runc (1.0.0~rc6+git20190307.2b18fe1d-0ubuntu1) disco; urgency=medium   * Update to https://github.com/opencontainers/runc/commit/2b18fe1d885ee5083ef9f0838fee39b62d653e30     - See also:         https://github.com/containerd/containerd/blob/v1.2.5/RUNC.md         https://github.com/containerd/containerd/blob/v1.2.5/vendor.conf#L23   * d/patches/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch:     dropped, applied upstream.  -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Thu, 14 Mar 2019 11:12:22 +1300 runc (1.0.0~rc6+git20181203.96ec2177-0ubuntu1) disco; urgency=medium   * Add 'basic-smoke' autopkgtest to verify basic functionality  -- Tianon Gravi <tianon@debian.org> Thu, 14 Feb 2019 14:23:13 -0800 runc (1.0.0~rc6+git20181203.96ec2177-0~ubuntu2) disco; urgency=medium   * d/patches/0001-nsenter-clone-proc-self-exe-to-avoid-exposing-host-b.patch:     Apply upstream fix for CVE-2019-5736.  -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Tue, 12 Feb 2019 11:52:37 +1300 runc (1.0.0~rc6+git20181203.96ec2177-0~ubuntu1) disco; urgency=medium   * Update to https://github.com/opencontainers/runc/commit/96ec2177ae841256168fcf76954f7177af9446eb     - See also:         https://github.com/containerd/containerd/blob/v1.2.2/RUNC.md         https://github.com/containerd/containerd/blob/v1.2.2/vendor.conf#L23  -- Tianon Gravi <tianon@debian.org> Thu, 17 Jan 2019 21:06:43 -0800
2021-10-19 04:35:40 Bryce Harrington runc (Ubuntu): milestone ubuntu-21.12
2021-12-08 16:34:17 Lucas Kanashiro runc (Ubuntu): milestone ubuntu-21.12 ubuntu-22.01
2022-01-11 14:31:09 Lucas Kanashiro runc (Ubuntu): status New In Progress
2022-01-13 05:32:26 Launchpad Janitor runc (Ubuntu): status In Progress Fix Released