[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()

2015-10-06 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/wily-proposed/lxd -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about this bug go to:

[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()

2015-10-06 Thread Launchpad Bug Tracker
This bug was fixed in the package lxd - 0.19-0ubuntu5 --- lxd (0.19-0ubuntu5) wily; urgency=medium * Cherry-pick a few more upstream bugfixes: - CVE-2015-1340: Fix race condition in uidshift (LP: #1502270) - Compare IPs more intelligently when changing core.https_address

[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()

2015-10-02 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications

[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()

2015-10-02 Thread Seth Arnold
The LXD team points out that they do not yet support any release with security updates; they are considering this a standard bugfix, https://github.com/lxc/lxd/pull/1188. Furthermore, LXD should own the uid ranges, and the storage for containers should not be on a clustered filesystem, so this is

[Bug 1502270] Re: chmod race in doUidshiftIntoContainer()

2015-10-02 Thread Seth Arnold
** Changed in: lxd (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1502270 Title: chmod race in doUidshiftIntoContainer() To manage notifications about