Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1271196

Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Package: release.debian.org
Severity: normal
Tags: trixie
User: release.debian.org@packages.debian.org
Usertags: pu
X-Debbugs-Cc: gibmat@debian.org
Control: affects -1 + src:incus

[ Reason ]
runc's recent fix for CVE-2025-52881 has exposed a problem with
apparmor profiles for nested containers
(https://github.com/opencontainers/runc/issues/4968). This requires an
update to Incus' logic for generating a container's apparmor profile.

[ Impact ]
Users cannot run docker within an Incus container.

[ Tests ]
I have manually tested running docker within a container and verified
that `docker run hello-world` works once again with the fix.

[ Risks ]
Minor/none -- the fix has been in upstream Incus packages for two weeks
and no regressions have been reported.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
Rebase fix from upstream: https://github.com/lxc/incus/pull/2624.

[ Other info ]
The source debdiff is attached.

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3 Mathias Gibbens <gibmat@debian.org> - 2025-11-22 17:20 +0100
  Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2025-12-06 18:20 +0100
    Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3 Mathias Gibbens <gibmat@debian.org> - 2025-12-06 19:10 +0100
  Bug#1121206: incus 6.0.4-2+deb13u3 flagged for acceptance Jonathan Wiltshire <jmw@debian.org> - 2025-12-20 15:10 +0100

csiph-web