-
lxc (1:2.0.7-2+deb9u2) stretch; urgency=medium
* 0005-debian-Use-iproute2-instead-of-iproute.patch: pull iproute2 instead
of iproute, fixing the creation of testing and unstable containers after
the iproute binary package was dropped.
-- Antonio Terceiro <email address hidden> Mon, 29 Jan 2018 20:23:36 -0200
-
lxc (1:2.0.7-2+deb9u1) stretch; urgency=medium
* 0003-lxc-debian-don-t-hardcode-valid-releases.patch: don't
hardcode list of valid Debian releases. Allows creating stable, buster,
testing, and unstable containers.
* 0004-lxc-debian-don-t-write-C.-locales-to-etc-locale.gen.patch: don't
insert C.* locales into /etc/locale.gen (Closes: #879595)
-- Antonio Terceiro <email address hidden> Fri, 27 Oct 2017 15:13:31 -0200
-
lxc (1:2.0.7-2) unstable; urgency=high
* use bash-completion's pkg-config support and don't move files around
* ignore lxc-test-cloneconfig if kernel has no overlay support
* CVE-2017-5985: Ensure target netns is caller-owned (Closes: #857295)
-- Evgeni Golov <email address hidden> Sat, 11 Mar 2017 09:47:20 +0100
-
lxc (1:2.0.7-1) unstable; urgency=medium
* New upstream version 2.0.7
+ Closes: #847909, #847894, #847466
-- Evgeni Golov <email address hidden> Mon, 23 Jan 2017 22:03:24 +0100
-
lxc (1:2.0.6-1) unstable; urgency=high
* New upstream version 2.0.6
+ attach: do not send procfd to attached process
Closes: #845465
CVE-2016-8649
* liblxc1: add depends on cgroupfs-mount | systemd (Closes: #844086)
* drop patches applied/imported upstream
* debian/tests: add iptables to tests depends
-- Evgeni Golov <email address hidden> Thu, 24 Nov 2016 08:07:02 +0100
-
lxc (1:2.0.5-3) unstable; urgency=medium
* add python3:Depends for lxc, so it gets a depends on python3
* lxc-tests replace lxc-dev, not lxc
* add a lintian override that the tests do not have a manpage
* register lxc-dev docs with doc-base
* add lintian override for ldconfig-trigger in lua-lxc
* s/LUA/Lua/g in d/control
-- Evgeni Golov <email address hidden> Sun, 06 Nov 2016 14:33:14 +0100
-
lxc (1:2.0.5-1) unstable; urgency=medium
* New upstream version 2.0.5
* drop cgmanager support
it's orphaned and upstream does recommend lxcfs instead
* fix execution of tests on systems which do not have overlay.ko
* add depends on lsb-base, thanks lintian
-- Evgeni Golov <email address hidden> Sat, 08 Oct 2016 14:03:16 +0200
-
lxc (1:2.0.4-1) unstable; urgency=medium
[ Antonio Terceiro ]
* debian/rules: create symlinks for each lxc-* binary in
/usr/share/bash-completion/completions/ so that bash completion actually
works
[ Evgeni Golov ]
* Imported Upstream version 2.0.4
+ Uses SIGRTMIN+3 for systemd containers (Closes: #831691, #799541)
+ The debian template properly generates locaes (Closes: #806746)
* drop 0020-fix-regression-when-creating-wheezy-containers.patch
* rebase patches ontop of 2.0.4
* add gnupg and dirmngr to recommends
* improve autopkgtest execution, making most autopkgtest run properly
-- Evgeni Golov <email address hidden> Thu, 25 Aug 2016 19:52:33 +0200
-
lxc (1:2.0.3-1) unstable; urgency=medium
* Imported Upstream version 2.0.3
- Fixes Inconsistent settings in lxc@.service (Closes: #826100)
* drop patch hunks that were applied in 2.0.3
* document how to change passwords in the container (Closes: #829239)
-- Evgeni Golov <email address hidden> Sat, 16 Jul 2016 11:52:47 +0200
-
lxc (1:2.0.1-3) unstable; urgency=medium
* 0020-lxc-debian-make-sure-init-is-installed.patch: update to fix
regression when creating wheezy containers.
-- Antonio Terceiro <email address hidden> Wed, 29 Jun 2016 15:10:57 -0300
-
lxc (1:2.0.1-2) unstable; urgency=medium
* 0020-lxc-debian-make-sure-init-is-installed.patch: make sure init is
included in Debain containers, since as of 1.34 it is not Essential
anymore.
-- Antonio Terceiro <email address hidden> Sat, 18 Jun 2016 09:16:43 -0300
-
lxc (1:2.0.1-1) unstable; urgency=medium
* Imported Upstream version 2.0.1
* drop patches applied upstream:
* demote apparmor to suggests (Closes: #824120)
-- Evgeni Golov <email address hidden> Sun, 22 May 2016 22:04:19 +0200
-
lxc (1:2.0.0-3) unstable; urgency=medium
* drop lxcinitdir.patch
* replace all patches by the versions accepted upstream
* cherry-pick fix for creating unpriv container on non-systemd systems
* add gbp.conf
-- Evgeni Golov <email address hidden> Sun, 01 May 2016 13:00:16 +0200
-
lxc (1:2.0.0-2) unstable; urgency=medium
[ Evgeni Golov ]
* add lxcfs and libpam-cgfs to recommends
* Standards-Version: 3.9.8
[ Antonio Terceiro ]
* Refresh patches
* debian/patches/0018-lxc-create-fix-B-best-option.patch: Fix `-B best`
option to lxc-create
-- Antonio Terceiro <email address hidden> Mon, 11 Apr 2016 14:19:45 -0300
-
lxc (1:1.1.5-1) unstable; urgency=medium
[ Evgeni Golov ]
* Imported Upstream version 1.1.5
* drop patches either applied or obsoleted upstream
* refresh patches
* call dh_installinit for lxc-net
* drop useless lintian override
* add autopkgtests from Ubuntu
- fix up some tests for Debian
* add dnsmasq-base to test depends
* debian/watch: updated to look for all LXC releases
* use dh_apparmor
* do not restart LXC on upgrades when using systemd
* build-depend on gnutls-dev
* update Depends/Recommends/Suggests based on the packaging in Ubuntu
* properly pass the systemd unit dir to configure
[ Antonio Terceiro ]
* 0014-Fix-520-multiple-instances-of-agetty-on-systemd.patch: add
upstream patch to avoid multiple instances of agetty on each console.
-- Antonio Terceiro <email address hidden> Sun, 31 Jan 2016 18:22:40 -0200
-
lxc (1:1.0.8-1) unstable; urgency=medium
* New upstream release
- Includes fixes for CVE-2015-1335 (Closes: #800471)
- Patches dropped for being already applied upstream:
- CVE-2015-1331.patch
- CVE-2015-1334.patch
- lxc-clone-rsync-hardlinks.patch
- lxc-clone-rsync-capabilities.patch
- big-big-login-delays-in-CentOS-7-systemd.patch
- lxc-debian-skip-security-updates-for-unstable-sid.patch
- lxc-debian-support-stretch-Debian-9-images.patch
- CVE-2015-1335.patch
- Renumbered patches
- Add cgmanager do Recommends:. Without it, lxc will always print a
warning, which seems to be harmless but for example will break
autopkgtest because of the unexpected output to stderr.
* debian/watch: added
* debian/upstream/signing-key.asc: added upstream signing key.
-- Antonio Terceiro <email address hidden> Tue, 24 Nov 2015 19:10:28 -0200
-
lxc (1:1.0.7-11) unstable; urgency=medium
* New maintainer (myself)
- Thanks Daniel Baumann for his previous efforts in maintaing lxc
* Added patches (all already applied upstream):
- 0019-big-big-login-delays-in-CentOS-7-systemd.patch
- 0020-Centos7-systemd.patch
- 0022-lxc-debian-skip-security-updates-for-unstable-sid.patch
- 0023-lxc-debian-support-stretch-Debian-9-images.patch
- 0024-lxc-debian-allow-not-including-contrib-non-free.patch
-- Antonio Terceiro <email address hidden> Sun, 08 Nov 2015 10:52:37 -0200
-
lxc (1:1.0.7-10) unstable; urgency=low
* Adding build-depends to dh-python.
-- Daniel Baumann <email address hidden> Tue, 18 Aug 2015 14:12:31 +0200
-
lxc (1:1.0.7-4) unstable; urgency=high
* Adding backported patch from upstream to prevent an unprivileged user
to use LXC to create arbitrary file on the filesystem [CVE-2015-1331]
(Closes: #793298).
* Adding backported patch from upstream to prevent an user to use LXC
to over-mount /proc which can be used to unconfined code execution
[CVE-2015-1334] (Closes: #793298).
-- Daniel Baumann <email address hidden> Wed, 22 Jul 2015 18:33:48 +0200
-
lxc (1:1.0.7-3) unstable; urgency=low
* Building with cgmanager (Closes: #773421).
-- Daniel Baumann <email address hidden> Tue, 28 Apr 2015 22:01:41 +0200
-
lxc (1:1.0.6-6) unstable; urgency=low
* Use http.debian.net instead of cdn.debian.net (Closes: #774204,
#774472).
-- Daniel Baumann <email address hidden> Mon, 05 Jan 2015 19:24:35 +0100