[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1502270/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()
The LXD team points out that they do not yet support any release with security updates; they are considering this a standard bugfix, https://github.com/lxc/lxd/pull/1188. Furthermore, LXD should own the uid ranges, and the storage for containers should not be on a clustered filesystem, so this is a low-priority issue. Thanks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1502270/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()
** Changed in: lxd (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1502270/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()
** Branch linked: lp:ubuntu/wily-proposed/lxd -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1502270/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()
This bug was fixed in the package lxd - 0.19-0ubuntu5 --- lxd (0.19-0ubuntu5) wily; urgency=medium * Cherry-pick a few more upstream bugfixes: - CVE-2015-1340: Fix race condition in uidshift (LP: #1502270) - Compare IPs more intelligently when changing core.https_address - Drop an unused container property - Make cached images and copied images private by default * Update debian/tests/control to depend on everything that we need -- Stéphane Graber Tue, 06 Oct 2015 13:20:58 +0100 ** Changed in: lxd (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/1502270/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
