Change log for runc package in Ubuntu

175 of 128 results
Published in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
runc (1.1.12+ds1-2ubuntu1) noble; urgency=medium

  * Merge with Debian unstable (LP: #2060890). Remaining changes:
    - d/control: add non default pkg.runc.with-bin Build-Profiles to runc
      binary package.
    - d/golang-github-opencontainers-runc-dev.docs: install NOTICE file to be
      compliant with the Apache 2 license
    - d/tests/control: remove integration and checkpoint autopkgtest.
      Since they depend on the runc binary package which is not provided by
      this source package by default.
   * Dropped changes (replaced by non default Build-Profiles):
    - d/control: remove the binary paragraph for runc.
    - d/golang-github-opencontainers-runc-dev.install: remove this file, it
      is causing a FTBFS, no need to have it in place, the library files are
      already installed correctly without it.
    - d/runc.*: remove all packaging related files associated to the
      runc binary package
    - d/rules: no need to generate manpages after build
    - d/rules: remove runc binary from the binary package

 -- Shengjing Zhu <email address hidden>  Tue, 02 Apr 2024 17:26:37 +0800
Published in mantic-proposed
runc (1.1.7-0ubuntu2.3) mantic; urgency=medium

  * Do not provided the runc binary package anymore (LP: #2022390).
    The runc binary package is now provided by src:runc-app.
    - d/control: remove the runc binary package paragraph.
    - d/runc.*: remove all files related to the runc binary package.
    - d/p/test--skip-fs-related-cgroups-tests.patch: skip a new cgroups test
      trying to write to /sys/fs/cgroup/memory.
    - d/golang-github-opencontainers-runc-dev.install: fix path of library
      files.

 -- Lucas Kanashiro <email address hidden>  Wed, 13 Mar 2024 17:53:06 -0300
Published in jammy-proposed
runc (1.1.7-0ubuntu1~22.04.3) jammy; urgency=medium

  * Do not provide the runc binary package anymore (LP: #2022390).
    The runc binary package is now provided by src:runc-app.
    - d/control: remove the containerd binary package paragraph.
    - d/containerd.*: remove all files related to the containerd binary
      package.
    - d/p/test--skip-fs-related-cgroups-tests.patch:
    - d/golang-github-opencontainers-runc-dev.install:

 -- Lucas Kanashiro <email address hidden>  Wed, 13 Mar 2024 18:07:43 -0300
Published in focal-proposed
runc (1.1.7-0ubuntu1~20.04.3) focal; urgency=medium

  * Do not provide the runc binary package anymore (LP: #2022390).
    The runc binary package is now provided by src:runc-app.
    - d/control: remove the containerd binary package paragraph.
    - d/containerd.*: remove all files related to the containerd binary
      package.
    - d/p/test--skip-fs-related-cgroups-tests.patch: skip a new cgroups test
      trying to write to /sys/fs/cgroup/memory.
    - d/golang-github-opencontainers-runc-dev.install: fix path of library
      files.

 -- Lucas Kanashiro <email address hidden>  Wed, 13 Mar 2024 18:07:43 -0300
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
runc (1.1.12+ds1-1ubuntu1) noble; urgency=medium

  * Merge with Debian unstable.
  * Remaining changes:
    - d/control: remove the binary paragraph for runc.
    - d/golang-github-opencontainers-runc-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.
    - d/golang-github-opencontainers-runc-dev.install: remove this file, it
      is causing a FTBFS, no need to have it in place, the library files are
      already installed correctly without it.
    - d/runc.*: remove all packaging related files associated to the
      runc binary package
    - d/rules: no need to generate manpages after build
    - d/rules: remove runc binary from the binary package
    - d/tests/{checkpoint,integration}: remove since they depend on the
      runc binary package which is not provided by this source package
      anymore
  * Dropped changes:
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    [ Incorporated by upstream. ]

Published in mantic-updates
Published in mantic-security
runc (1.1.7-0ubuntu2.2) mantic-security; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:41:08 +0530
Published in jammy-updates
Published in jammy-security
runc (1.1.7-0ubuntu1~22.04.2) jammy-security; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:40:36 +0530
Published in focal-updates
Published in focal-security
runc (1.1.7-0ubuntu1~20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:33:42 +0530
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
runc (1.1.10+ds1-1ubuntu2) noble; urgency=medium

  * SECURITY UPDATE: container escape vulnerability
    - d/p/0001-Fix-File-to-Close.patch: Fix File to Close
    - d/p/0002-init-verify-after-chdir-that-cwd-is-inside-the-conta.patch:
      init: verify after chdir that cwd is inside the container
    - d/p/0003-setns-init-do-explicit-lookup-of-execve-argument-ear.patch:
      setns init: do explicit lookup of execve argument early
    - d/p/0004-init-close-internal-fds-before-execve.patch: init: close
      internal fds before execve
    - d/p/0005-cgroup-plug-leaks-of-sys-fs-cgroup-handle.patch: cgroup:
      plug leaks of /sys/fs/cgroup handle
    - d/p/0006-libcontainer-mark-all-non-stdio-fds-O_CLOEXEC-before.patch:
      ibcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
    - CVE-2024-21626

 -- Nishit Majithia <email address hidden>  Wed, 24 Jan 2024 16:41:53 +0530
Superseded in mantic-updates
Superseded in mantic-security
runc (1.1.7-0ubuntu2.1) mantic-security; urgency=medium

  * No change rebuild due to golang-1.20, golang-1.21 updates

 -- Nishit Majithia <email address hidden>  Thu, 18 Jan 2024 12:36:53 +0530
Published in lunar-updates
Published in lunar-security
runc (1.1.7-0ubuntu1~23.04.2) lunar-security; urgency=medium

  * No change rebuild due to golang-1.20, golang-1.21 updates

 -- Nishit Majithia <email address hidden>  Thu, 18 Jan 2024 09:19:45 +0530
Superseded in noble-release
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
runc (1.1.10+ds1-1ubuntu1) noble; urgency=medium

  * Merge from Debian unstable (LP: #2022390). Make src:runc follow Debian and
    src:runc-app is going to ship the application with vendorized dependencies
    so we can keep updating just the application across all supported releases.
  * Added changes:
    - d/control: remove the binary paragraph for runc.
    - d/runc.*: remove all packaging related files associated to the
      runc binary package
    - d/tests/{checkpoint,integration}: remove since they depend on the
      runc binary package which is not provided by this source package
      anymore.
    - d/golang-github-opencontainers-runc-dev.install: remove this file, it
      is causing a FTBFS, no need to have it in place, the library files are
      already installed correctly without it.
    - d/rules: no need to generate manpages after build.
    - d/rules: remove runc binary from the binary package
    - d/golang-github-opencontainers-runc-dev.docs: install NOTICE file to
      be compliant with the Apache 2 license.

 -- Lucas Kanashiro <email address hidden>  Thu, 11 Jan 2024 19:43:18 -0300
Superseded in noble-release
Published in mantic-release
Deleted in mantic-proposed (Reason: Moved to mantic)
runc (1.1.7-0ubuntu2) mantic; urgency=medium

  * No-change rebuild with Go 1.21.

 -- Michael Hudson-Doyle <email address hidden>  Thu, 24 Aug 2023 15:59:42 +1200

Available diffs

Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.1.7-0ubuntu1~20.04.1) focal; urgency=medium

  * Backport version from Mantic to Focal (LP: #2023694).
    - Build with Go 1.18
      + d/control: b-d on golang-1.18-go intead of golang-any
      + d/rules: add Go 1.18 to $PATH

 -- Lucas Kanashiro <email address hidden>  Fri, 30 Jun 2023 17:49:24 -0300
Superseded in jammy-updates
Deleted in jammy-proposed (Reason: moved to -updates)
runc (1.1.7-0ubuntu1~22.04.1) jammy; urgency=medium

  * Backport version from Mantic to Jammy (LP: #2023694).

 -- Lucas Kanashiro <email address hidden>  Fri, 30 Jun 2023 17:42:42 -0300
Obsolete in kinetic-proposed
runc (1.1.7-0ubuntu1~22.10.1) kinetic; urgency=medium

  * Backport version from Mantic to Kinetic (LP: #2023694).

 -- Lucas Kanashiro <email address hidden>  Fri, 07 Jul 2023 17:54:53 -0300
Superseded in lunar-updates
Deleted in lunar-proposed (Reason: moved to -updates)
runc (1.1.7-0ubuntu1~23.04.1) lunar; urgency=medium

  * Backport version from Mantic to Lunar (LP: #2023694).

 -- Lucas Kanashiro <email address hidden>  Fri, 30 Jun 2023 17:24:06 -0300
Superseded in mantic-release
Deleted in mantic-proposed (Reason: Moved to mantic)
runc (1.1.7-0ubuntu1) mantic; urgency=medium

  * New upstream release (LP: #2018107).
    - Update patches in d/patches:
      + test--skip_TestFactoryNewTmpfs.patch: rename to
        test--skip-privileged-test-factory_linux_test.go.patch to follow the
        Debian patch. Also updated it accordingly to Debian.
      + test--skip-fs-related-cgroups-tests.patch: remove one skipped test,
        now it is part of the patch above.
      + fix_cpuset_range_byte_order.patch: removed, applied by upstream.
        [Applied in upstream version 1.1.7]
      + lp2013318-fix-device-files-in-containers.patch: removed, fixed by
        upstream.
        [Fixed in upstream version 1.1.7]
      + CVE-2023-25809.patch: removed, applied by upstream.
        [Applied in upstream version 1.1.7]
      + CVE-2023-27561_2023-28642.patch: removed, applied by upstream.
        [Applied in upstream version 1.1.7]
  * Bump debhelper compatibility level to 12. Now, that Bionic reached EOSS we
    can update it to level 12.
    - d/control: build depend on debhelper-compat (= 12) instead of debhelper.
    - d/compat: removed, not needed anymore.
  * d/control: remove unneeded Breaks statement for docker.io.

 -- Lucas Kanashiro <email address hidden>  Mon, 12 Jun 2023 17:39:01 -0300

Available diffs

Superseded in mantic-release
Deleted in mantic-proposed (Reason: Moved to mantic)
runc (1.1.4-0ubuntu4) mantic; urgency=medium

  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Mon, 15 May 2023 13:20:53 +0200

Available diffs

Obsolete in kinetic-updates
Obsolete in kinetic-security
runc (1.1.4-0ubuntu1~22.10.3) kinetic-security; urgency=medium

  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Mon, 15 May 2023 13:18:52 +0200
Superseded in lunar-updates
Superseded in lunar-security
runc (1.1.4-0ubuntu3.1) lunar-security; urgency=medium

  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Mon, 15 May 2023 13:19:29 +0200
Superseded in jammy-updates
Superseded in jammy-security
runc (1.1.4-0ubuntu1~22.04.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Mon, 15 May 2023 12:31:53 +0200
Superseded in focal-updates
Superseded in focal-security
runc (1.1.4-0ubuntu1~20.04.3) focal-security; urgency=medium

  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Mon, 15 May 2023 12:15:47 +0200
Published in bionic-updates
Published in bionic-security
runc (1.1.4-0ubuntu1~18.04.2) bionic-security; urgency=medium

  * d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use
    device files such as /dev/null in containers (LP: #2013318)
  * SECURITY UPDATE: Incorrect access control through /sys/fs/cgroup
    - debian/patches/CVE-2023-25809.patch: apply MS_RDONLY if
      /sys/fs/cgroup is bind-mounted or mask if bind source is unavailable
      in libcontainer/rootfs_linux.go.
    - CVE-2023-25809
  * SECURITY UPDATE: Incorrect access control through /proc and /sys
    - debian/patches/CVE-2023-27561_2023-28642.patch: Prohibit /proc and
      /sys to be symlinks in libcontainer/rootfs_linux.go.
    - CVE-2023-27561
    - CVE-2023-28642

 -- David Fernandez Gonzalez <email address hidden>  Tue, 16 May 2023 12:07:05 +0200
Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~20.04.2) focal; urgency=medium

  * d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use
    device files such as /dev/null in containers (LP: #2013318)

 -- Lena Voytek <email address hidden>  Wed, 12 Apr 2023 13:21:54 -0700
Superseded in jammy-updates
Deleted in jammy-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~22.04.2) jammy; urgency=medium

  * d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use
    device files such as /dev/null in containers (LP: #2013318)

 -- Lena Voytek <email address hidden>  Wed, 12 Apr 2023 13:18:53 -0700
Superseded in kinetic-updates
Deleted in kinetic-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~22.10.2) kinetic; urgency=medium

  * d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use
    device files such as /dev/null in containers (LP: #2013318)

 -- Lena Voytek <email address hidden>  Wed, 12 Apr 2023 13:10:10 -0700
Superseded in mantic-release
Published in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar)
runc (1.1.4-0ubuntu3) lunar; urgency=medium

  * d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use
    device files such as /dev/null in containers (LP: #2013318)

 -- Lena Voytek <email address hidden>  Thu, 06 Apr 2023 10:57:46 -0700

Available diffs

Superseded in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar)
runc (1.1.4-0ubuntu2) lunar-proposed; urgency=medium

  * Import blockIODevice.patch from Debian (LP: #2009851)

 -- Reinhard Tartler <email address hidden>  Fri, 24 Mar 2023 19:05:09 -0400

Available diffs

Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~20.04.1) focal; urgency=medium

  * Backport version 1.1.4-0ubuntu1 from Lunar (LP: #1996909).
    - d/control: b-d on golang-1.18-go instead of golang-any.
    - d/rules: build with Golang 1.18.

 -- Lucas Kanashiro <email address hidden>  Thu, 17 Nov 2022 12:24:35 -0300
Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~18.04.1) bionic; urgency=medium

  * Backport version 1.1.4-0ubuntu1 from Lunar (LP: #1996909).
    - d/control: b-d on golang-1.18-go instead of golang-any.
    - d/rules: build with Golang 1.18.
    - d/rules: set GO111MODULE to off.
    - d/rules: set GOCACHE.

 -- Lucas Kanashiro <email address hidden>  Thu, 17 Nov 2022 14:05:31 -0300
Superseded in jammy-updates
Deleted in jammy-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~22.04.1) jammy; urgency=medium

  * Backport version 1.1.4-0ubuntu1 from Lunar (LP: #1996909).

 -- Lucas Kanashiro <email address hidden>  Thu, 17 Nov 2022 12:17:32 -0300
Superseded in kinetic-updates
Deleted in kinetic-proposed (Reason: moved to -updates)
runc (1.1.4-0ubuntu1~22.10.1) kinetic; urgency=medium

  * Backport version 1.1.4-0ubuntu1 from Lunar (LP: #1996909).

 -- Lucas Kanashiro <email address hidden>  Thu, 17 Nov 2022 11:57:32 -0300
Superseded in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar)
runc (1.1.4-0ubuntu1) lunar; urgency=medium

  * New upstream release (LP: #1993442).
  * Refresh patches.

 -- Lucas Kanashiro <email address hidden>  Wed, 16 Nov 2022 11:59:36 -0300
Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.1.0-0ubuntu1~20.04.2) focal; urgency=medium

  * d/p/fix_cpuset_range_byte_order.patch: fix byte order while parsing cpuset
    range to bits (LP: #1993221)

 -- Chengen Du <email address hidden>  Mon, 17 Oct 2022 08:59:54 +0000
Superseded in jammy-updates
Deleted in jammy-proposed (Reason: moved to -updates)
runc (1.1.0-0ubuntu1.1) jammy; urgency=medium

  * d/p/fix_cpuset_range_byte_order.patch: fix byte order while parsing cpuset
    range to bits (LP: #1993221)

 -- Chengen Du <email address hidden>  Mon, 17 Oct 2022 15:48:16 +0800
Superseded in kinetic-updates
Superseded in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar)
Deleted in kinetic-proposed (Reason: moved to -updates)
runc (1.1.2-0ubuntu1.1) kinetic; urgency=medium

  * d/p/fix_cpuset_range_byte_order.patch: fix byte order while parsing cpuset
    range to bits (LP: #1993221)

 -- Chengen Du <email address hidden>  Mon, 17 Oct 2022 15:59:43 +0800
Superseded in lunar-release
Obsolete in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic)
runc (1.1.2-0ubuntu1) kinetic; urgency=medium

  * New upstream release.

 -- Lucas Kanashiro <email address hidden>  Thu, 12 May 2022 16:15:38 -0300

Available diffs

Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
runc (1.1.0-0ubuntu1~18.04.1) bionic; urgency=medium

  * Backport version 1.1.0-0ubuntu1 from Jammy (LP: #1960449).
    - Build with Golang 1.16
      + d/control: b-d on golang-1.16-go instead of golang-any.
      + d/rules: add Golang 1.16 to $PATH.
    - d/rules: set GO111MODULE to off, to avoid Internet connection during the
      build.
    - d/rules: set GOCACHE to build directory.

 -- Lucas Kanashiro <email address hidden>  Thu, 31 Mar 2022 16:03:03 -0300
Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.1.0-0ubuntu1~20.04.1) focal; urgency=medium

  * Backport version 1.1.0-0ubuntu1 from Jammy (LP: #1960449).
    - d/control: b-d on golang-1.16-go instead of golang-any.
    - d/rules: build with Golang 1.16.

 -- Lucas Kanashiro <email address hidden>  Wed, 09 Feb 2022 18:00:30 -0300
Obsolete in impish-updates
Deleted in impish-proposed (Reason: moved to -updates)
runc (1.1.0-0ubuntu1~21.10.1) impish; urgency=medium

  * Backport version 1.1.0-ubuntu1 from Jammy (LP: #1960449).

 -- Lucas Kanashiro <email address hidden>  Wed, 09 Feb 2022 17:55:38 -0300
Superseded in kinetic-release
Published in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
runc (1.1.0-0ubuntu1) jammy; urgency=medium

  * New upstream release.
  * Refresh patches:
    - d/p/test--skip_TestFactoryNewTmpfs.patch
    - d/p/test--skip-fs-related-cgroups-tests.patch
  * Remove patch not needed anymore:
    - d/p/test--skip-Hugetlb.patch

 -- Lucas Kanashiro <email address hidden>  Wed, 09 Feb 2022 11:46:31 -0300

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
runc (1.0.3-0ubuntu1) jammy; urgency=medium

  * New upstream release (LP: #1946899).
  * d/rules: remove DH_GOLANG_INSTALL_EXTRA, the directories listed there do
    not exist anymore.

 -- Lucas Kanashiro <email address hidden>  Mon, 10 Jan 2022 11:51:10 -0300

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
runc (1.0.1-0ubuntu3) jammy; urgency=medium

  * No-change rebuild against Go 1.17

 -- William 'jawn-smith' Wilson <email address hidden>  Tue, 30 Nov 2021 13:57:31 -0600

Available diffs

Obsolete in hirsute-updates
Deleted in hirsute-proposed (Reason: moved to -updates)
runc (1.0.1-0ubuntu2~21.04.1) hirsute; urgency=medium

  * Backport version 1.0.1-0ubuntu2 from Impish (LP: #1938908).

Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.0.1-0ubuntu2~20.04.1) focal; urgency=medium

  * Backport version 1.0.1-0ubuntu2 from Impish (LP: #1938908).

Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
runc (1.0.1-0ubuntu2~18.04.1) bionic; urgency=medium

  * Backport version 1.0.1-0ubuntu2 from Impish (LP: #1938908).
    - Build with Golang 1.13
      + d/control: b-d on golang-1.13-go instead of golang-any.
      + d/rules: add Golang 1.13 to $PATH.
    - d/rules: set GOPATH to a temporary directory.
    - d/rules: set GO111MODULE to off, to avoid Internet connection during the
      build.

Superseded in jammy-release
Obsolete in impish-release
Deleted in impish-proposed (Reason: Moved to impish)
runc (1.0.1-0ubuntu2) impish; urgency=medium

  * d/p/test--skip-fs-related-cgroups-tests.patch: skip a new cgroups related
    test. It requires permission to write in /sys/fs/cgroup/memory during its
    execution.

 -- Lucas Kanashiro <email address hidden>  Mon, 09 Aug 2021 11:40:32 -0300
Superseded in impish-proposed
runc (1.0.1-0ubuntu1) impish; urgency=medium

  * New upstream release.
  * d/watch: adjust regex to correctly match the tarball files on Github.
  * d/p/test--skip-fs-related-cgroups-tests.patch: update according to the
    upstream changes.
  * d/s/lintian-overrides: remove it, the override there is not needed.

 -- Lucas Kanashiro <email address hidden>  Thu, 05 Aug 2021 11:48:36 -0300
Superseded in hirsute-updates
Obsolete in hirsute-security
runc (1.0.0~rc95-0ubuntu1~21.04.2) hirsute-security; urgency=medium

  * No change rebuild in -security pocket. (LP: #1937286)

 -- Marc Deslauriers <email address hidden>  Fri, 23 Jul 2021 14:51:04 -0400
Superseded in bionic-updates
Superseded in bionic-security
runc (1.0.0~rc95-0ubuntu1~18.04.2) bionic-security; urgency=medium

  * No change rebuild in -security pocket. (LP: #1937286)

 -- Marc Deslauriers <email address hidden>  Fri, 23 Jul 2021 14:46:29 -0400
Superseded in focal-updates
Superseded in focal-security
runc (1.0.0~rc95-0ubuntu1~20.04.2) focal-security; urgency=medium

  * No change rebuild in -security pocket. (LP: #1937286)

 -- Marc Deslauriers <email address hidden>  Fri, 23 Jul 2021 14:45:39 -0400
Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
runc (1.0.0~rc95-0ubuntu1~18.04.1) bionic; urgency=medium

  * New upstream release.
    - Several regressions were found in 1.0.0-rc93 by upstream and fixed in
      this new release.
      + Ensure the scratch pipe is read during ExportBPF (LP: #1927219).
    - Drop patches applied by upstream:
      + d/patches/CVE-2021-30465/*.patch
      + d/patches/fix-patchpbf-test-on-32-bit.patch
  * d/rules: set VERSION variable when building runc (LP: #1929106).

 -- Lucas Kanashiro <email address hidden>  Thu, 20 May 2021 11:11:34 -0300
Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.0.0~rc95-0ubuntu1~20.04.1) focal; urgency=medium

  * New upstream release.
    - Several regressions were found in 1.0.0-rc93 by upstream and fixed in
      this new release.
      + Ensure the scratch pipe is read during ExportBPF (LP: #1927219).
    - Drop patches applied by upstream:
      + d/patches/CVE-2021-30465/*.patch
      + d/patches/fix-patchpbf-test-on-32-bit.patch
  * d/rules: set VERSION variable when building runc (LP: #1929106).

 -- Lucas Kanashiro <email address hidden>  Thu, 20 May 2021 11:06:57 -0300
Obsolete in groovy-updates
Deleted in groovy-proposed (Reason: moved to -updates)
runc (1.0.0~rc95-0ubuntu1~20.10.1) groovy; urgency=medium

  * New upstream release.
    - Several regressions were found in 1.0.0-rc93 by upstream and fixed in
      this new release.
      + Ensure the scratch pipe is read during ExportBPF (LP: #1927219).
    - Drop patches applied by upstream:
      + d/patches/CVE-2021-30465/*.patch
      + d/patches/fix-patchpbf-test-on-32-bit.patch
  * d/rules: set VERSION variable when building runc (LP: #1929106).

 -- Lucas Kanashiro <email address hidden>  Thu, 20 May 2021 11:01:11 -0300
Superseded in hirsute-updates
Deleted in hirsute-proposed (Reason: moved to -updates)
runc (1.0.0~rc95-0ubuntu1~21.04.1) hirsute; urgency=medium

  * New upstream release.
    - Several regressions were found in 1.0.0-rc93 by upstream and fixed in
      this new release.
      + Ensure the scratch pipe is read during ExportBPF (LP: #1927219).
    - Drop patches applied by upstream:
      + d/patches/CVE-2021-30465/*.patch
      + d/patches/fix-patchpbf-test-on-32-bit.patch
  * d/rules: set VERSION variable when building runc (LP: #1929106).

 -- Lucas Kanashiro <email address hidden>  Thu, 20 May 2021 10:53:22 -0300
Superseded in impish-release
Deleted in impish-proposed (Reason: Moved to impish)
runc (1.0.0~rc95-0ubuntu1) impish; urgency=medium

  * New upstream release.
    - Several regressions were found in 1.0.0-rc93 by upstream and fixed in
      this new release.
      + Ensure the scratch pipe is read during ExportBPF (LP: #1927219).
    - Drop patches applied by upstream:
      + d/patches/CVE-2021-30465/*.patch
      + d/patches/fix-patchpbf-test-on-32-bit.patch
  * d/rules: set VERSION variable when building runc (LP: #1929106).

 -- Lucas Kanashiro <email address hidden>  Thu, 20 May 2021 10:40:14 -0300
Superseded in impish-proposed
runc (1.0.0~rc93-0ubuntu2) impish; urgency=medium

  * SECURITY UPDATE: symlink exchange attack
    - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount
      destination validation.
    - CVE-2021-30465

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 14:27:26 -0400
Superseded in bionic-updates
Superseded in bionic-security
runc (1.0.0~rc93-0ubuntu1~18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: symlink exchange attack
    - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount
      destination validation.
    - CVE-2021-30465

 -- Eduardo Barretto <email address hidden>  Thu, 13 May 2021 18:11:36 +0200
Superseded in hirsute-updates
Superseded in hirsute-security
runc (1.0.0~rc93-0ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: symlink exchange attack
    - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount
      destination validation.
    - CVE-2021-30465

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 14:27:26 -0400
Superseded in groovy-updates
Obsolete in groovy-security
runc (1.0.0~rc93-0ubuntu1~20.10.2) groovy-security; urgency=medium

  * SECURITY UPDATE: symlink exchange attack
    - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount
      destination validation.
    - CVE-2021-30465

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 14:27:26 -0400
Superseded in focal-updates
Superseded in focal-security
runc (1.0.0~rc93-0ubuntu1~20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: symlink exchange attack
    - debian/patches/CVE-2021-30465/*.patch: upstream patches to add mount
      destination validation.
    - CVE-2021-30465

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 14:27:26 -0400
Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
runc (1.0.0~rc93-0ubuntu1~18.04.1) bionic; urgency=medium

  * Backport version 1.0.0~rc93-0ubuntu1 from Hirsute (LP: #1919322,
    LP: #1916485).
    - Use Go 1.13 to build it, with the default Go 1.10 it FTBFS.
      + d/control: b-d on golang-1.13-go instead of golang-any,
      + d/rules: add Go 1.13 to the $PATH.
    - d/rules: set GOCACHE to a temporary directory. dh-golang sets it to
      "off" which is not accepted by Go >= 1.12.
    - d/rules: set GO111MODULE to "off" to avoid getting modules info online.

 -- Lucas Kanashiro <email address hidden>  Tue, 16 Mar 2021 15:47:19 -0300
Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
runc (1.0.0~rc93-0ubuntu1~20.04.1) focal; urgency=medium

  * Backport version 1.0.0~rc93-0ubuntu1 from Hirsute (LP: #1919322,
    LP: #1916485).

 -- Lucas Kanashiro <email address hidden>  Tue, 16 Mar 2021 15:34:35 -0300
Superseded in groovy-updates
Deleted in groovy-proposed (Reason: moved to -updates)
runc (1.0.0~rc93-0ubuntu1~20.10.1) groovy; urgency=medium

  * Backport version 1.0.0~rc93-0ubuntu1 from Hirsute (LP: #1919322,
    LP: #1916485).

 -- Lucas Kanashiro <email address hidden>  Tue, 16 Mar 2021 15:23:05 -0300
Superseded in impish-release
Obsolete in hirsute-release
Deleted in hirsute-proposed (Reason: Moved to hirsute)
runc (1.0.0~rc93-0ubuntu1) hirsute; urgency=medium

  * New upstream release (LP: #1919182).
    - runc now has special handling for seccomp profiles to avoid making new
      syscalls unusable for glibc (LP: #1916485).
  * Remove patch addressing a bug fixed by upstream:
    - debian/patches/test--fix_TestGetAdditionalGroups.patch
  * Refresh patch:
    - debian/patches/test--skip-fs-related-cgroups-test.patch
  * Backport upstream patch to fix patchpbf test on armhf:
    - debian/patches/fix-patchpbf-test-on-32-bit.patch

 -- Lucas Kanashiro <email address hidden>  Tue, 10 Mar 2021 09:30:36 -0300
Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
runc (1.0.0~rc92-0ubuntu1) hirsute; urgency=medium

  * New upstream release.
  * Refresh patches.
  * Add patch to skip tests relying on cgroups fs mountpoints.
  * Update VCS links to point to Github where the packaging work is done.

 -- Lucas Kanashiro <email address hidden>  Tue, 12 Jan 2021 17:30:36 -0300
Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
runc (1.0.0~rc10-0ubuntu3) hirsute; urgency=medium

  * No-change rebuild using new golang

 -- Steve Langasek <email address hidden>  Wed, 11 Nov 2020 22:25:13 +0000
Superseded in hirsute-release
Obsolete in groovy-release
Deleted in groovy-proposed (Reason: moved to Release)
runc (1.0.0~rc10-0ubuntu2) groovy; urgency=medium

  * No-change rebuild using new golang

 -- Steve Langasek <email address hidden>  Tue, 22 Sep 2020 08:55:00 +0000
Superseded in bionic-updates
Superseded in bionic-security
runc (1.0.0~rc10-0ubuntu1~18.04.2) bionic-security; urgency=medium

  * No change rebuild in the -security pocket.

 -- Marc Deslauriers <email address hidden>  Mon, 09 Mar 2020 07:58:37 -0400
Obsolete in eoan-updates
Obsolete in eoan-security
runc (1.0.0~rc10-0ubuntu1~19.10.2) eoan-security; urgency=medium

  * No change rebuild in the -security pocket.

 -- Marc Deslauriers <email address hidden>  Mon, 09 Mar 2020 07:59:13 -0400
Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
runc (1.0.0~rc10-0ubuntu1~18.04.1) bionic; urgency=medium

  * Backport to bionic. (LP: #1863669, CVE-2019-19921)

 -- Michael Hudson-Doyle <email address hidden>  Wed, 19 Feb 2020 14:04:03 +1300
Superseded in eoan-updates
Deleted in eoan-proposed (Reason: moved to -updates)
runc (1.0.0~rc10-0ubuntu1~19.10.1) eoan; urgency=medium

  * Backport to eoan. (LP: #1863669, CVE-2019-19921)

 -- Michael Hudson-Doyle <email address hidden>  Wed, 19 Feb 2020 14:03:26 +1300
Superseded in groovy-release
Published in focal-release
Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release)
runc (1.0.0~rc10-0ubuntu1) focal; urgency=medium

  [ Lucas Kanashiro ]
  * Run dh_golang_autopkgtest with isolation-machine restriction (LP: #1856083)
    - d/control: remove Testsuite field since we are now overwriting the
      autodep8 test definition.
    - d/t/control: overwrite autodep8 test definition to add isolation-machine
      restriction.
  * d/t/control: Use commas in Restrictions field of basic-smoke test

  [ Tianon Gravi ]
  * Update to 1.0.0-rc10 upstream release

 -- Tianon Gravi <email address hidden>  Tue, 18 Feb 2020 09:06:24 +1300
Superseded in focal-release
Obsolete in eoan-release
Deleted in eoan-proposed (Reason: moved to Release)
runc (1.0.0~rc8+git20190923.3e425f80-0ubuntu1) eoan; urgency=medium

  * New upstream snapshot, fixing CVE-2019-16884.

 -- Michael Hudson-Doyle <email address hidden>  Mon, 30 Sep 2019 14:12:18 +1300
175 of 128 results