-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 22 Jul 2015 18:33:48 +0200 Source: lxc Binary: lxc lxc-dbg Architecture: source amd64 Version: 1:1.0.7-4 Distribution: unstable Urgency: high Maintainer: Daniel Baumann <mail@daniel-baumann.ch> Changed-By: Daniel Baumann <mail@daniel-baumann.ch> Description: lxc - Linux Containers userspace tools lxc-dbg - Linux Containers userspace tools (debug) Closes: 793298 Changes: lxc (1:1.0.7-4) unstable; urgency=high . * Adding backported patch from upstream to prevent an unprivileged user to use LXC to create arbitrary file on the filesystem [CVE-2015-1331] (Closes: #793298). * Adding backported patch from upstream to prevent an user to use LXC to over-mount /proc which can be used to unconfined code execution [CVE-2015-1334] (Closes: #793298). Checksums-Sha1: 1235cd758c7a826f71c590983390a57e39abaa96 2072 lxc_1.0.7-4.dsc d63de002f243827c74884b9ebe311618d4d7d9f5 512912 lxc_1.0.7.orig.tar.xz a09e95d098c031e4c9f14ee8e3fb2a9eb2ba8ca0 27104 lxc_1.0.7-4.debian.tar.xz 6ff83d3c03169933d8a6d71af44f3e4ce6b38dec 852252 lxc-dbg_1.0.7-4_amd64.deb 5314d2700fbd9420b6c1310f2a1ce384f4186169 640502 lxc_1.0.7-4_amd64.deb Checksums-Sha256: 838ca04920d5e90fd67f4917d5408df6a9f2c6afced14f50f6dc57b86710701b 2072 lxc_1.0.7-4.dsc a6222b0c12ee48c520d50557abbada04c8d1eff51056065324c93a1eacb3b176 512912 lxc_1.0.7.orig.tar.xz 9c43ca8eaa37963a0c94e1b332824aab591e1d2e947326f4aa61d1524b7c656d 27104 lxc_1.0.7-4.debian.tar.xz ded5f6b1bcf538c5333397af118340c5f39e1137fd1dd926a01845c9b3510fdb 852252 lxc-dbg_1.0.7-4_amd64.deb c719d1c39ae42b3362a36c928f0b0ea8bca9aeb88a6d3e0851c6ed9342ff11db 640502 lxc_1.0.7-4_amd64.deb Files: 15418b846f7539f140f89b282ce41853 2072 admin optional lxc_1.0.7-4.dsc d1eebc57b1952cca17230e598ef5891c 512912 admin optional lxc_1.0.7.orig.tar.xz c2a23e47d69839aaca7ecbe2a855e7c4 27104 admin optional lxc_1.0.7-4.debian.tar.xz d9bbae93024c1bc599f069fc85526126 852252 debug extra lxc-dbg_1.0.7-4_amd64.deb 1782b87fe4f5e236bdada6bcf0325435 640502 admin optional lxc_1.0.7-4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVr8nmAAoJEFXPG/mGq7nHp3kP/ivXEM3kRFAeEhP1J9QP9mNA QkDKX0PwBxPyfu+H31X+sLzSUCLrFkcgUou4z2I2ZWMsWPsMfbz6d3Hwd+dOa18A Wm3lwc3K/q7u/PcukXR/Xbd68W9Etd/11/gaZNYSzIkTqEaBCrDgmhmM/g8E+Xip Gliac1Cmh4IKN/Oi5a7FWjAqdsC4trzOhBefU3VOPKr3vO7VXyJ5WDXfqnflt71F iwzEDZ+9BQvKXMZiY8Gq+faoZ4m+aHwhZEjryEFeHOfhNGRqxnbxJqu1niE0rHaV 2hyUKw3SbS8P7XCdt56UMm9THn1Yy6qS3XHPwX0cvKh0wHhDk1qhPF/XUgc7iQaW QnMtoH/aA8iWHnmAY0dcRQaVch6KXIOwILRoSPBgL+0DlvY27dGgMN9iuBlhvSBL E2EAAqj+HZ8ARcF58G4XjuNqaf5f8CzdDm3xun5unVqhSTxgi7T9zgDKtQra0Djs vnGkGSF5v/Kd+RHwXdWp0oNHBoncqMJCF9JfWZt+fm+sy7Hgpu8k8NlrHMfLiceP 7VmbrifYyXsMn19a0dsSpP9W0cWGnTSua+2UqI3wI6TU1+VWseOms4BGJMgfv4CH TYJ5x7ek4z3P3IXdBYoOc4aNHufNWN4+140P0a37rBAfYjnlAVy0TAdwrwpxCWGW CF9I2UMk/TgREvI2f0n3 =+t/8 -----END PGP SIGNATURE-----