[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2020-03-25 Thread Stéphane Graber
** No longer affects: lxc (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1527374 Title: CVE-2015-8709 Status in linux package in Ubuntu: Fix Released Status in

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-05-11 Thread Steve Beattie
** Description changed: ** DISPUTED ** kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-02-28 Thread Mathew Hodson
** No longer affects: linux-lts-trusty (Ubuntu) ** Changed in: linux-lts-quantal (Ubuntu) Importance: Undecided => Medium ** Changed in: linux-lts-quantal (Ubuntu) Status: Confirmed => Won't Fix ** Changed in: linux-lts-raring (Ubuntu) Importance: Undecided => Medium ** Changed

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-02-24 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/trusty/linux-lts-wily /trusty-security ** Branch linked: lp:~ubuntu-branches/ubuntu/trusty/linux-lts-wily /trusty-proposed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-02-24 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/trusty-security/linux-lts-vivid ** Branch linked: lp:ubuntu/trusty-proposed/linux-lts-vivid -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1527374

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-02-10 Thread Steve Beattie
** Description changed: - A kernel bug in user namespaces allows root in a container to ptrace - host-root-owned tasks during a window of opportunity during lxc-attach / - 'lxc exec', before they drop privilege by doing setuid to the container - root uid. + ** DISPUTED ** kernel/ptrace.c in the

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-19 Thread Launchpad Bug Tracker
This bug was fixed in the package linux - 4.3.0-6.17 --- linux (4.3.0-6.17) xenial; urgency=low [ Tim Gardner ] * Release Tracking Bug - LP: #1532958 [ Eric Dumazet ] * SAUCE: (noup) net: fix IP early demux races - LP: #1526946 [ Guilherme G. Piccoli ] *

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Mathew Hodson
** Summary changed: - privilege escalation on attach through ptrace + CVE-2015-8709 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1527374 Title: CVE-2015-8709 Status in

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-armadaxp (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-flo (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-goldfish (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-manta (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-lts-trusty (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-ti-omap4 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-lts-quantal (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Mathew Hodson
** Tags added: kernel-cve-tracking-bug -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1527374 Title: CVE-2015-8709 Status in linux package in Ubuntu: Fix Committed Status

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-mako (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: lxc (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-lts-saucy (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.

[Touch-packages] [Bug 1527374] Re: CVE-2015-8709

2016-01-05 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: linux-lts-raring (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to lxc in Ubuntu.