-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: lxc Binary: lxc, lxc-dbg Architecture: linux-any Version: 1:1.0.6-6+deb8u2 Maintainer: Daniel Baumann <[email protected]> Homepage: http://linuxcontainers.org/ Standards-Version: 3.9.6 Vcs-Browser: http://daniel-baumann.ch/gitweb/?p=debian/packages/lxc.git Vcs-Git: git://daniel-baumann.ch/git/debian/packages/lxc.git Build-Depends: debhelper (>= 9), dh-autoreconf, dh-systemd, doxygen, autotools-dev, docbook2x, graphviz, libapparmor-dev, liblua5.2-dev, libcap-dev, libseccomp-dev [amd64 armhf i386], libselinux-dev, linux-libc-dev, pkg-config, python3-dev Package-List: lxc deb admin optional arch=linux-any lxc-dbg deb debug extra arch=linux-any Checksums-Sha1: 6ea61825e4edc71ddec56d3899d4f0e9dce1c509 508868 lxc_1.0.6.orig.tar.xz 8051af53c88c44d30acc929b6564bae9c3026a0a 34740 lxc_1.0.6-6+deb8u2.debian.tar.xz Checksums-Sha256: 4a794c57ee852bcbb8f3d543eace6a86e75156c5681c9daf1b01d79407a70c74 508868 lxc_1.0.6.orig.tar.xz 54a4641866ebd4afcc1d18607be68cca8c71f4ee9f3230a6741757bdc3695d2d 34740 lxc_1.0.6-6+deb8u2.debian.tar.xz Files: 30a70dfbbb7fa016febd26b33f12e20d 508868 lxc_1.0.6.orig.tar.xz 88ed64895d0431816f3cac18114cc1ad 34740 lxc_1.0.6-6+deb8u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJWS7XvAAoJEPwNsbvNRgveK08QAL+Y4EDqEldbmyt+hrjo5I1c O8fyw1JTaPOt4oPWxUjbMUva7yejTzWwhkrOP6LRPU4biJCDg0zAJ6YV7RPQ0EEY hEAPuIsQWQfeIzFGRQ5jK/yPkpkyAK/tSTYBLQuhtwn9Rt03p/+95SP+/i5uppoj KO3i64q92BenCV7mT0/A+KB6mdKR893JRKHXLegL2OyHsoYP5Nj55sAb5n96WMXP Yd/CKpRW0SPG1wwPaVaXz3dUEVzCSj9gLuaWvf/nhBIEd/ipHtdZxueoMBXnGkUB tF08NEaBPlZfXP1nCVgNBeDKRC64RY7KWDDfG4B/aYxYNg3hA8q26J7XXnXnvFp1 bN3E4qFYTMk/rox5/HsvvTXXuKeSwMcawRhlx43ZJ1t1SGZ8bSlnHUgwc5h1/GW1 NYi8rAPifqIu2sGkEMF5TwzpWCTjA9/wv1uyhMnIfOXuQXipWz4xAMKRWztxyuoN PwxTzxdmwV1yJh6EuHwV/tZxpRzv2B+h4lwBiUCgW0RaDU/1b37fdEgDWhlvh/uF Zf0WGjVucgnHUblglZaMuGNwCPteQcsq4IlPm26lb9zUjG7qgq07IushRq3c0jJY opr1idINcszyp52zqjamulkkjV+NzBgKiDvVpa0Iswam/nTUP0YXwwtFks2FMW4r jdxjLA8MW1+QbSrrbtrT =FIx2 -----END PGP SIGNATURE----- Changes: lxc (1:1.0.6-6+deb8u2) jessie-security; urgency=high * CVE-2015-1335: prevent local containment administrator from escaping container via symlink attack. (Closes: #800471). Also include 2 followup patches that fixed regressions in the original fix. Patches obtained from the Ubuntu package: - 0020-CVE-2015-1335.patch - 0021-CVE-2015-1335-2.patch - 0022-CVE-2015-1335-3.patch -- Antonio Terceiro <[email protected]> Fri, 13 Nov 2015 09:53:32 -0200
