[ Reason ]
Two issues have been found that would be good to get fixed in trixie:
* Fix a memory cleanup issue that can occasionally cause containers
to fail to start.
* Adjust apparmor profile generation when nesting is enabled. This is
needed by newer versions of runc (ie, Docker) that have the fix for
CVE-2025-52881 applied. Without it, attempting to start nested
containers within the lxc container will fail. (Reported as bug
#1146472.)
[ Impact ]
LXC in trixie currently suffers from two issues that have been fixed
upstream.
[ Tests ]
None -- the memory fix is trivial, and the apparmor profile update has
been in upstream lxc releases since the 6.0.6 release.
[ Risks ]
Minor/none -- two targeted fixes cherry-picked from the upstream git
repo.
[ Checklist ]
[*] *all* changes are documented in the d/changelog
[*] I reviewed all changes and I approve them
[*] attach debdiff against the package in (old)stable
[*] the issue is verified as fixed in unstable
[ Changes ]
Two fixes as outlined above.
[ Other info ]
The source debdiff is attached.