Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1271196 > unrolled thread

Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3 Mathias Gibbens <gibmat@debian.org> - 2025-11-22 17:20 +0100
    Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2025-12-06 18:20 +0100
      Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3 Mathias Gibbens <gibmat@debian.org> - 2025-12-06 19:10 +0100
    Bug#1121206: incus 6.0.4-2+deb13u3 flagged for acceptance Jonathan Wiltshire <jmw@debian.org> - 2025-12-20 15:10 +0100

#1271196 — Bug#1121206: trixie-pu: package incus/6.0.4-2+deb13u3

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: trixie
User: release.debian.org@packages.debian.org
Usertags: pu
X-Debbugs-Cc: gibmat@debian.org
Control: affects -1 + src:incus

[ Reason ]
runc's recent fix for CVE-2025-52881 has exposed a problem with
apparmor profiles for nested containers
(https://github.com/opencontainers/runc/issues/4968). This requires an
update to Incus' logic for generating a container's apparmor profile.

[ Impact ]
Users cannot run docker within an Incus container.

[ Tests ]
I have manually tested running docker within a container and verified
that `docker run hello-world` works once again with the fix.

[ Risks ]
Minor/none -- the fix has been in upstream Incus packages for two weeks
and no regressions have been reported.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
Rebase fix from upstream: https://github.com/lxc/incus/pull/2624.

[ Other info ]
The source debdiff is attached.

[toc] | [next] | [standalone]

#1272974

Control: tags -1 + confirmed

On Sat, 2025-11-22 at 16:13 +0000, Mathias Gibbens wrote:
> runc's recent fix for CVE-2025-52881 has exposed a problem with
> apparmor profiles for nested containers
> (https://github.com/opencontainers/runc/issues/4968). This requires
> an update to Incus' logic for generating a container's apparmor
> profile.

Please go ahead.

Regards,

Adam

[toc] | [prev] | [next] | [standalone]

#1272995

[Multipart message — attachments visible in raw view] — view raw

On Sat, 2025-12-06 at 17:16 +0000, Adam D. Barratt wrote:
> Please go ahead.

  Uploaded, thanks!

Mathias

[toc] | [prev] | [next] | [standalone]

#1275310 — Bug#1121206: incus 6.0.4-2+deb13u3 flagged for acceptance

package release.debian.org
tags 1121206 = trixie pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian trixie.

Thanks for your contribution!

Upload details
==============

Package: incus
Version: 6.0.4-2+deb13u3

Explanation: fix AppArmor profile generation for nested containers

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web