[pkg-lxc-devel] Bug#1146505: trixie-pu: package lxc/1:6.0.4-4+deb13u4

[Mathias Gibbens]

Package: release.debian.org
Severity: normal
Tags: trixie
User: release.debian.org at packages.debian.org
Usertags: pu
X-Debbugs-Cc: pkg-lxc-devel at lists.alioth.debian.org, gibmat at debian.org
Control: affects -1 + src:lxc

[ Reason ]
Two issues have been found that would be good to get fixed in trixie:

  * Fix a memory cleanup issue that can occasionally cause containers
to fail to start.

  * Adjust apparmor profile generation when nesting is enabled. This is
needed by newer versions of runc (ie, Docker) that have the fix for
CVE-2025-52881 applied. Without it, attempting to start nested
containers within the lxc container will fail. (Reported as bug
#1146472.)

[ Impact ]
LXC in trixie currently suffers from two issues that have been fixed
upstream.

[ Tests ]
None -- the memory fix is trivial, and the apparmor profile update has
been in upstream lxc releases since the 6.0.6 release.

[ Risks ]
Minor/none -- two targeted fixes cherry-picked from the upstream git
repo.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [*] I reviewed all changes and I approve them
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
Two fixes as outlined above.

[ Other info ]
The source debdiff is attached.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lxc_6.0.4-4+deb13u4.diff
Type: text/x-patch
Size: 5361 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-lxc-devel/attachments/20260902/9ac0a8e5/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-lxc-devel/attachments/20260902/9ac0a8e5/attachment.sig>