Format: 1.8 Date: Tue, 05 Jun 2018 17:05:49 -0400 Source: lxc Binary: lxc lxc1 lxc-dev lxc-utils liblxc-common liblxc-dev liblxc1 libpam-cgfs Architecture: i386 Version: 3.0.1-0ubuntu1 Distribution: cosmic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Stéphane Graber Description: liblxc-common - Linux Containers userspace tools (common tools) liblxc-dev - Linux Containers userspace tools (development) liblxc1 - Linux Containers userspace tools (library) libpam-cgfs - PAM module for managing cgroups for LXC lxc - Transitional package - lxc -> lxc-utils lxc-dev - Transitional package - lxc-dev -> liblxc-dev lxc-utils - Linux Containers userspace tools lxc1 - Transitional package - lxc1 -> lxc-utils Changes: lxc (3.0.1-0ubuntu1) cosmic; urgency=medium . * New upstream bugfix release: - tools: fix unitialized variable - storage: fix lvm fs uuid generation - lxc-oci: fix Cmd/Entrypoint parsing - lxc-oci: make umoci less verbose - lxclock: use thread-safe OFD fcntl() locks - locktests: fix test suite - conf: ensure umounts don’t propagate to host - doc: Tweak Japanese translation in lxc.container.conf(5) - fix signal sending in lxc.init - rootfs pinning: On NFS, make file hidden but don’t delete it - conf: fix temporary file creation - ringbuf: fix temporary file creation - Fix compilation with static libcap and shared gnutls - attach: always drop supplementary groups - lxc init: remove dead code - storage/rsync: free memory on error - tools/utils: free memory on error - lxc init: coding style - utils: define __NR_setns if missing on old glibcs - attach: try to always drop supplementary groups - conf: ret-try devpts mount without gid=5 on error - execute: fix app containers without root mapping - conf: fix net type checks in run_script_argv() - seccomp: handle arch inversion - seccomp: handle all errors - seccomp: cleanup compat architecture handling - seccomp: improve logging - tools: document -d/–daemonize for lxc-execute - seccomp: non-functional changes - seccomp: handle arch inversion II - lxc-oci: mkdir the download directory - do_lxcapi_create: set umask - lxc/tools/lxc_monitor: include missing - pam-cgfs: ignore the system umask when creating the cgroup hierarchy - Also pass action scripts to CRIU on checkpointing - Fix the memory leak in cgfsng_attach - Fix memory leak in list_active_containers - Fix tool_utils.c build when HAVE_SETNS is unset - coverity: #1435210 - coverity: #1435208 - coverity: #1435207 - coverity: #1435206 - coverity: #1435205 - coverity: #1435203 - coverity: #1435200 - coverity: #1435198 - coverity: #1426734 - lxccontainer: non-functional changes - lxccontainer: use thread-safe OFD locks - lxccontainer: non-functional changes - lxccontainer: do_lxcapi_is_running() - lxccontainer: do_lxcapi_freeze() - lxccontainer: do_lxcapi_unfreeze() - lxccontainer: non-functional changes - lxccontainer: use thread-safe open() + write() - lxccontainer: non-functional changes - lxccontainer: non-functional changes - lxccontainer: non-functional changes - coverity: #1435263 - fix logic for execute log file - utils: add LXC_PROC_PID_FD_LEN - execute: use static buffer - execute: do not check inherited fds again - add some TRACE/ERROR reporting - execute: account for -o path option count - execute: set init_path when existing init is found - genl: remove - coverity: #1248104 - coverity: #1248105 - coverity: #1425744 - utils: account for terminating \0 byte - confile: satisfy gcc-8 - network: silence gcc-8 - network: adhere to IFNAMSIZ limit - support case ignored suffix for sizes - utils: fix parse_byte_size_string() coding style - strlcpy: add strlcpy() implementation - tree-wide: s/strncpy()/strlcpy()/g - CODING_STYLE: add section about using strlcpy() - tools: s/strncpy()/strlcpy()/g - Revert “tools: s/strncpy()/strlcpy()/g” - tools: s/strncpy()/memcpy()/ - doc: Add “-d/–daemon” option to Japanese lxc-execute(1) - doc: Fix size unit style in Japanese lxc.container.conf(5) - coverity: #1435604 - coverity: #1435603 - coverity: #1435602 - coverity: #1425844 - config: allow read-write /sys in user namespace - coverity: #1425836 - coverity: #1248106 - capabilities: raise ambient capabilities - coverity: #1425802 - cgroups: refactor cgroup handling - cgroups: remove freezer_state() - seccomp: #ifdef SCMP_ARCH_AARCH64 - conf: simplify write_id_mapping() - log: enable per-thread container name prefix - lxc-init: skip signals that can’t be caught - execute: use execveat() syscall if supported - tools: only create log file when requested - seccomp: fix off-by-one error in array allocation for sscanf - seccomp: remove confusing comment line - seccomp: remove unnecessary memset - seccomp: fix type mismatch when parsing syscall arguments filters - lxcseccomp: cleanup header - seccomp: parse_config_v1() - utils: add remove_trailing_newlines() - seccomp: get_v2_default_action() - seccomp: get_action_name() - seccomp: get_v2_action() - seccomp: fix get_seccomp_arg_value() - seccomp: parse_v2_rules() - seccomp: move #ifdefines - seccomp: get_hostarch() - seccomp: scmp_filter_ctx get_new_ctx() - seccomp: do_resolve_add_rule() - seccomp: parse_config_v2() - seccomp: parse_config() - seccomp: lxc_read_seccomp_config() - tree-wide: s/sigprocmask/pthread_sigmask()/g - utils: fix task_blocking_signal() - lxccontainer: fix fd leaks when sending signals - confile: order architectures - start: log setns() failure - seccomp: leak fixup - seccomp: re-add action parse error handling - seccomp: refactor line handling of parse_config - seccomp: error on unrecognized actions - seccomp: lxc_read_seccomp_config() - seccomp: parse_v2_rules() - seccomp: make do_resolve_add_rule() more strict - tools: fix lxc-create with global config value - tools: fix lxc-create with global config value II - coverity: #1435806 - coverity: #1435805 - coverity: #1435803 - coverity: #1435747 - conf: non-functional changes - conf: make is_execute a boolean - conf: non-functional changes - conf: make close_all_fds a boolean - conf: reshuffle mount members - conf: simplify tty handling - conf: pts -> pty_max - conf: non-functional changes - utils: fix task_blocking_signal() - network: fix socket handle leak - start: do not init ns_clone_flags to -1 - conf: ensure lxc_delete_tty() does not crash - start: add reboot macros - conf: make root idmap structs const - conf: make tmp_umount_proc bool - conf: non-functional changes - conf: va_end was not called. - confile: improve strprint() - change defines for return value of handlers - start: fix waitpid() blocking issue - start: log unknown info.si_code - tree-wide: fix mode of some files - confile_utils: apply strprint() - templates: actually create DOWNLOAD_TEMP directory - templates: fix download template - Patch lxc-update-config . * Bump standard to 4.1.4 Checksums-Sha1: b84021743322ae2ec3ae2a19ecdb1ab1f2efdfa6 233864 liblxc-common-dbgsym_3.0.1-0ubuntu1_i386.ddeb 868389688c00e453ec4f6f20a96587962471f9aa 371176 liblxc-common_3.0.1-0ubuntu1_i386.deb b8e29a01f82c5ded794efdbdef65c004ce8eab80 12104 liblxc-dev_3.0.1-0ubuntu1_i386.deb 086098194769b1ba155516433dc6927a07797c05 633912 liblxc1-dbgsym_3.0.1-0ubuntu1_i386.ddeb b5a6410f2b30a4ff6818d96df69423245013d162 255232 liblxc1_3.0.1-0ubuntu1_i386.deb ee9393dccce69c3ef1d6cd0ee4a6c2c6e57a3db4 29060 libpam-cgfs-dbgsym_3.0.1-0ubuntu1_i386.ddeb 1c38bc88dbd6f86c63a6c377291414eb4ac4dece 18804 libpam-cgfs_3.0.1-0ubuntu1_i386.deb 60acca2d208210efcc0e40fe821193548160d7fd 755440 lxc-utils-dbgsym_3.0.1-0ubuntu1_i386.ddeb adf5e607dff4b93e66081c32f03dace9cd1800fe 326504 lxc-utils_3.0.1-0ubuntu1_i386.deb 9a86ae5de26249a20e43bcb0461110ed2767d4a2 9442 lxc_3.0.1-0ubuntu1_i386.buildinfo Checksums-Sha256: 13b5399efcf4aa0f41a5a52e64cb11dd18f4039dbb8f289216c1c433625fb562 233864 liblxc-common-dbgsym_3.0.1-0ubuntu1_i386.ddeb f9b9a2820bcd2478dc83089298ec1d19d6c7eeeea01501ce62ade4d43f4c103b 371176 liblxc-common_3.0.1-0ubuntu1_i386.deb efe1fd9acbf2f3d956ff8e28281517c4c985d5dba4bd21d4c518ed8cd6138d6a 12104 liblxc-dev_3.0.1-0ubuntu1_i386.deb 432356dc94dbaa0c197c9d282f4d0716df7a28c1c1320e4c12a2ab2537350ee0 633912 liblxc1-dbgsym_3.0.1-0ubuntu1_i386.ddeb f88107a7ffb83a6da96e5a87edac3f479de97bfe82f0d0d82b529f698d3ef77a 255232 liblxc1_3.0.1-0ubuntu1_i386.deb b8c82f379d398133de85609df7c87a998c134ffd63a034c1edfadf69da6fe83f 29060 libpam-cgfs-dbgsym_3.0.1-0ubuntu1_i386.ddeb 5c76560e36036e46f0f182f69629ae205c2e7a982cf27fe443c6652fac2ca633 18804 libpam-cgfs_3.0.1-0ubuntu1_i386.deb d9ec3d39a1efcb24538ed09aee71f83cb4c719f9bd9af808219c73657e863b9b 755440 lxc-utils-dbgsym_3.0.1-0ubuntu1_i386.ddeb dd9407be0afc122fac6811b1e12323a797b0e4eff9101b389cba89ab662067d9 326504 lxc-utils_3.0.1-0ubuntu1_i386.deb e29efcd7c1753956e4392ca40393c1087cc7a2f3b8aca32bbec12d3c5bf54932 9442 lxc_3.0.1-0ubuntu1_i386.buildinfo Files: bdb0caea8dee747b8bb136a15dab4939 233864 debug optional liblxc-common-dbgsym_3.0.1-0ubuntu1_i386.ddeb 063ccdfb96ae17718c27de767d11571f 371176 admin optional liblxc-common_3.0.1-0ubuntu1_i386.deb c5fcef9752874d6a591d16f1dd352147 12104 libdevel optional liblxc-dev_3.0.1-0ubuntu1_i386.deb e4d11be5f572f9c958cfd58b00301de9 633912 debug optional liblxc1-dbgsym_3.0.1-0ubuntu1_i386.ddeb 87d99debb2523a7200d456cdc230dfd2 255232 libs optional liblxc1_3.0.1-0ubuntu1_i386.deb 9d23016cade47da92dd011209609ef53 29060 debug optional libpam-cgfs-dbgsym_3.0.1-0ubuntu1_i386.ddeb b6d945474699aab6f6c04b33679e2281 18804 admin optional libpam-cgfs_3.0.1-0ubuntu1_i386.deb 4f97f7176fc5d52c474d63156a23ba36 755440 debug optional lxc-utils-dbgsym_3.0.1-0ubuntu1_i386.ddeb 68cdfbae6b2f30d8273fc1b394474ccd 326504 admin optional lxc-utils_3.0.1-0ubuntu1_i386.deb f2eef3d65a0fc6339df3584cafa2c30c 9442 admin optional lxc_3.0.1-0ubuntu1_i386.buildinfo