[ubuntu/noble-proposed] docker.io-app 27.5.1-0ubuntu3~24.04.1 (Accepted)

Athos Ribeiro athos.ribeiro at canonical.com
Wed May 21 13:15:35 UTC 2025


docker.io-app (27.5.1-0ubuntu3~24.04.1) noble; urgency=medium

  * Backport from plucky to noble (LP: #2085187)
  * d/control: build with golang 1.22 for consistency across the supported
    release
  * d/rules: add golang 1.22 to PATH
  * d/t/docker-in-lxd: workaround Apparmor/kernel bug (LP #2067900)
  * d/docker.io.postinst: notify when a reboot is required to reload the
    AppArmor profile (LP #2065423).

docker.io-app (27.5.1-0ubuntu3) plucky; urgency=medium

  * d/control: set a version for the docker-cli Provides

docker.io-app (27.5.1-0ubuntu2) plucky; urgency=medium

  * d/control: provides docker-cli (LP: #2099941)

docker.io-app (27.5.1-0ubuntu1) plucky; urgency=medium

  * New upstream version 27.5.1 (LP: #2085187)
  * d/control: build with golang 1.24 (LP: #2098661)
  * d/rules: add golang 1.24 to PATH
  * d/patches: drop patches for CVE-2024-41110. Fixed upstream
  * d/helpers/build-manpages.sh: build manpages with Go 1.24
  * d/manpages/*: update manpages for version 27.5.1
  * d/docker.io.docs: update NOTICE files

docker.io-app (26.1.3-0ubuntu2) plucky; urgency=medium

  * SECURITY UPDATE: authz plugin bypass causes privilege escalation
    - debian/patches/CVE-2024-41110-1.patch: Authz plugin security fixes
      for 0-length content and path validation
    - debian/patches/CVE-2024-41110-2.patch: If url includes scheme,
      urlPath will drop hostname, which would not match the auth check
    - CVE-2024-41110

Date: Tue, 01 Apr 2025 11:11:56 -0300
Changed-By: Athos Ribeiro <athos.ribeiro at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/docker.io-app/27.5.1-0ubuntu3~24.04.1
-------------- next part --------------
Format: 1.8
Date: Tue, 01 Apr 2025 11:11:56 -0300
Source: docker.io-app
Built-For-Profiles: noudeb
Architecture: source
Version: 27.5.1-0ubuntu3~24.04.1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Athos Ribeiro <athos.ribeiro at canonical.com>
Launchpad-Bugs-Fixed: 2085187 2098661 2099941
Changes:
 docker.io-app (27.5.1-0ubuntu3~24.04.1) noble; urgency=medium
 .
   * Backport from plucky to noble (LP: #2085187)
   * d/control: build with golang 1.22 for consistency across the supported
     release
   * d/rules: add golang 1.22 to PATH
   * d/t/docker-in-lxd: workaround Apparmor/kernel bug (LP #2067900)
   * d/docker.io.postinst: notify when a reboot is required to reload the
     AppArmor profile (LP #2065423).
 .
 docker.io-app (27.5.1-0ubuntu3) plucky; urgency=medium
 .
   * d/control: set a version for the docker-cli Provides
 .
 docker.io-app (27.5.1-0ubuntu2) plucky; urgency=medium
 .
   * d/control: provides docker-cli (LP: #2099941)
 .
 docker.io-app (27.5.1-0ubuntu1) plucky; urgency=medium
 .
   * New upstream version 27.5.1 (LP: #2085187)
   * d/control: build with golang 1.24 (LP: #2098661)
   * d/rules: add golang 1.24 to PATH
   * d/patches: drop patches for CVE-2024-41110. Fixed upstream
   * d/helpers/build-manpages.sh: build manpages with Go 1.24
   * d/manpages/*: update manpages for version 27.5.1
   * d/docker.io.docs: update NOTICE files
 .
 docker.io-app (26.1.3-0ubuntu2) plucky; urgency=medium
 .
   * SECURITY UPDATE: authz plugin bypass causes privilege escalation
     - debian/patches/CVE-2024-41110-1.patch: Authz plugin security fixes
       for 0-length content and path validation
     - debian/patches/CVE-2024-41110-2.patch: If url includes scheme,
       urlPath will drop hostname, which would not match the auth check
     - CVE-2024-41110
Checksums-Sha1:
 4b80c37767316128c7f9284dc4a8a3d1aeba4192 2447 docker.io-app_27.5.1-0ubuntu3~24.04.1.dsc
 61bd81385c293815d7c812312ba52546205c4899 24574055 docker.io-app_27.5.1.orig.tar.gz
 c469dd8e860a31939536b852e93b6cef54597231 99100 docker.io-app_27.5.1-0ubuntu3~24.04.1.debian.tar.xz
 a5c27341928a717092c01947daab4589c933fa60 8723 docker.io-app_27.5.1-0ubuntu3~24.04.1_source.buildinfo
Checksums-Sha256:
 831d0741758c20bc8377578f25c20e3a665534b7aabdafdb30ec8f6c7928270d 2447 docker.io-app_27.5.1-0ubuntu3~24.04.1.dsc
 56b9a6ee36c7d5a20deddf9ede497142fbe8f609b96a3d889874406b8def84aa 24574055 docker.io-app_27.5.1.orig.tar.gz
 729bdce05d2a1d6e4362e3c0086a1e237dc29e93c8681d79b073a772c2924221 99100 docker.io-app_27.5.1-0ubuntu3~24.04.1.debian.tar.xz
 a61167c334712c9c2e6aabfe3fa686fefa947e63a929f506ffacf9532a20007b 8723 docker.io-app_27.5.1-0ubuntu3~24.04.1_source.buildinfo
Files:
 606cf9ffb500ebbc78bb7ee600a352c4 2447 admin optional docker.io-app_27.5.1-0ubuntu3~24.04.1.dsc
 a5289cdaa1596f62ac99e74d114c06a6 24574055 admin optional docker.io-app_27.5.1.orig.tar.gz
 abdfbbe20a6da980c0db1a0e659c9d23 99100 admin optional docker.io-app_27.5.1-0ubuntu3~24.04.1.debian.tar.xz
 77621ba1aa254cb071c009566986a07b 8723 admin optional docker.io-app_27.5.1-0ubuntu3~24.04.1_source.buildinfo


More information about the noble-changes mailing list