2015-07-21 13:16:51 |
Roman Fiedler |
bug |
|
|
added bug |
2015-07-21 14:00:40 |
Tyler Hicks |
bug |
|
|
added subscriber Ubuntu Security Team |
2015-07-21 14:00:46 |
Tyler Hicks |
bug |
|
|
added subscriber Serge Hallyn |
2015-07-21 14:00:54 |
Tyler Hicks |
bug |
|
|
added subscriber Stéphane Graber |
2015-07-21 15:13:12 |
Stéphane Graber |
attachment added |
|
strace-lxc-master-bin-true https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4432063/+files/strace-lxc-master-bin-true |
|
2015-07-24 23:53:55 |
Serge Hallyn |
attachment added |
|
Proposed patch to prevent lxc-start mounting onto symlinks https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4433778/+files/0001-Prevent-mounting-onto-symlinks-inside-a-container.patch |
|
2015-08-03 17:39:58 |
Marc Deslauriers |
cve linked |
|
2015-1335 |
|
2015-08-03 20:20:30 |
Serge Hallyn |
attachment added |
|
0001-Prevent-mounting-onto-symlinks-inside-a-container.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4438472/+files/0001-Prevent-mounting-onto-symlinks-inside-a-container.patch |
|
2015-08-05 23:03:09 |
Serge Hallyn |
attachment added |
|
0001-Detect-when-mount-entry-targets-are-symbolic-links.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4439977/+files/0001-Detect-when-mount-entry-targets-are-symbolic-links.patch |
|
2015-08-06 06:04:55 |
Serge Hallyn |
attachment added |
|
0001-Detect-when-mount-entry-targets-are-symbolic-links.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4440204/+files/0001-Detect-when-mount-entry-targets-are-symbolic-links.patch |
|
2015-08-07 21:03:29 |
Serge Hallyn |
attachment removed |
0001-Detect-when-mount-entry-targets-are-symbolic-links.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4440204/+files/0001-Detect-when-mount-entry-targets-are-symbolic-links.patch |
|
|
2015-08-07 21:03:55 |
Serge Hallyn |
attachment added |
|
Fixed version of the combined patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4441280/+files/0001-Detect-when-mount-entry-targets-are-symbolic-links.patch |
|
2015-09-01 18:06:48 |
Serge Hallyn |
attachment added |
|
Final, working patch against upstream git. https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4455796/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-01 18:08:10 |
Serge Hallyn |
lxc (Ubuntu): status |
New |
In Progress |
|
2015-09-01 18:08:39 |
Serge Hallyn |
lxc (Ubuntu): importance |
Undecided |
High |
|
2015-09-01 18:15:46 |
Serge Hallyn |
attachment added |
|
debdiff for wily https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4455798/+files/wily.debdiff |
|
2015-09-02 13:41:50 |
Serge Hallyn |
attachment removed |
debdiff for wily https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4455798/+files/wily.debdiff |
|
|
2015-09-02 13:42:01 |
Serge Hallyn |
attachment removed |
Final, working patch against upstream git. https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4455796/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-02 13:43:06 |
Serge Hallyn |
attachment added |
|
Patch against 1.0 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4456150/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-02 13:43:22 |
Serge Hallyn |
attachment added |
|
Patch against 1.1 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4456151/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-02 13:43:47 |
Serge Hallyn |
attachment added |
|
patch against git HEAD https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4456152/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-17 04:20:15 |
Serge Hallyn |
attachment added |
|
NEW patch against upstream git HEAD https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4466529/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-17 19:37:38 |
Serge Hallyn |
attachment added |
|
A patch which seems to have no regressions https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467102/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-17 20:11:12 |
Serge Hallyn |
attachment removed |
A patch which seems to have no regressions https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467102/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-17 20:11:32 |
Serge Hallyn |
attachment added |
|
A patch which seems to have no regressions https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467148/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-17 20:20:42 |
Serge Hallyn |
attachment removed |
A patch which seems to have no regressions https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467148/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-17 20:20:59 |
Serge Hallyn |
attachment added |
|
A patch which seems to have no regressions https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467159/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-17 20:28:39 |
Serge Hallyn |
attachment removed |
A patch which seems to have no regressions https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467159/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-17 20:29:02 |
Serge Hallyn |
attachment added |
|
A patch which seems to have no regressions (v2) https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467160/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-17 22:26:07 |
Serge Hallyn |
attachment added |
|
New patch against git HEAD https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467228/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-18 16:22:00 |
Serge Hallyn |
attachment added |
|
0001-Protect-container-mounts-against-symlinks.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467896/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-18 17:10:46 |
Serge Hallyn |
attachment added |
|
hopefully final patch (with manpage update) against git HEAD https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467949/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-18 17:11:05 |
Serge Hallyn |
attachment removed |
0001-Protect-container-mounts-against-symlinks.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467896/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-18 17:11:17 |
Serge Hallyn |
attachment removed |
A patch which seems to have no regressions (v2) https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4467160/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-18 20:05:37 |
Serge Hallyn |
attachment added |
|
0001-Protect-container-mounts-against-symlinks.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4468056/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-18 20:38:47 |
Serge Hallyn |
attachment removed |
0001-Protect-container-mounts-against-symlinks.patch https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4468056/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-18 20:39:08 |
Serge Hallyn |
attachment added |
|
Patch against git head https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4468090/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-22 20:04:09 |
Serge Hallyn |
attachment added |
|
patch against 1.0.7 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471605/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-22 20:05:15 |
Serge Hallyn |
attachment added |
|
Patch against 1.1.2 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471606/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-22 20:05:53 |
Serge Hallyn |
attachment added |
|
Patch against 1.1.2 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471608/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-22 20:06:04 |
Serge Hallyn |
attachment removed |
Patch against 1.1.2 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471608/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
|
2015-09-22 20:06:33 |
Serge Hallyn |
attachment added |
|
patch against 1.1.3 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471609/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-22 20:06:58 |
Serge Hallyn |
attachment added |
|
patch against stable-1.0 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471610/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-22 20:07:16 |
Serge Hallyn |
attachment added |
|
patch against stable-1.1 https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4471611/+files/0001-Protect-container-mounts-against-symlinks.patch |
|
2015-09-29 15:41:08 |
Launchpad Janitor |
lxc (Ubuntu): status |
In Progress |
Fix Released |
|
2015-09-29 15:41:08 |
Launchpad Janitor |
lxc (Ubuntu): status |
In Progress |
Fix Released |
|
2015-09-29 15:50:53 |
Tyler Hicks |
information type |
Private Security |
Public Security |
|
2015-12-04 15:31:59 |
Mike Gabriel |
attachment added |
|
Backport fix for CVE-2015-1335 to LXC 0.7.x (Ubuntu 12.04 / Debian squeeze-lts) https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1476662/+attachment/4529631/+files/CVE-2015-1335.patch |
|