#988730 CVE-2017-18641

Package:
lxc-templates
Source:
lxc-templates
Description:
Linux Containers userspace tools (templates)
Submitter:
Moritz Muehlenhoff
Date:
2024-03-17 17:45:05 UTC
Severity:
important
Tags:
#988730#5
Date:
2021-05-18 18:44:41 UTC
From:
To:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1661447

This was originally for LXC, but with 3.0.2 the templates are now in
lxc-templates.

Cheers,
        Moritz

#988730#10
Date:
2024-01-28 00:51:58 UTC
From:
To:
  lxc-templates is essentially deprecated upstream in favor of
distrobuilder. From the launchpad discussion:

  And there was a discussion in debian-lts[1] about marking this CVE as
no-dsa or ignored, which is how things are flagged in the security
tacker.

  Given the amount of work required for very little gain and an
inactive upstream, I'm tagging this bug as wontfix.

Mathias

[1] -- https://lists.debian.org/debian-lts/2020/02/msg00102.html

#988730#17
Date:
2024-01-28 07:44:08 UTC
From:
To:
Hi,

Thanks for the update. Do you know of any plans of making
distrobuilder available?

Regards,
Salvatore

#988730#22
Date:
2024-01-28 20:13:06 UTC
From:
To:
  Up to this point I don't know of anything concrete. There are a few
references over the years of people's desire to package it, but nothing
much more appears to have happened. I will file an ITP shortly for
distrobuilder, so it's at least on my radar to work on at some point in
the future.

Mathias

#988730#27
Date:
2024-03-17 17:41:30 UTC
From:
To:
  distrobuilder is now available in both testing and unstable. I'll be
reaching out to some of the users of lxc-templates to let them know and
suggesting that they migrate to using distrobuilder.

Mathias