{"push_id":814820242,"size":4,"distinct_size":4,"ref":"refs/heads/master","head":"7fc8a8f21931f4fc09000c21fe7e69c6b4806bf5","before":"fc2bcbd561b96e8713cf277e14d77c8887a56ce3","commits":[{"sha":"96e120e828e474be5e29bbed987b81abc0044d98","author":{"email":"089afc6d81f66f1168a9849e15660feae286e024@ubuntu.com","name":"Stéphane Graber"},"message":"Fix remote handling\n\n - Don't allow empty remotes to be passed\n - Support \"unix://\" as an identifier to the default unix socket\n - Change the default remote to unix://\n - Don't allow removing the default remote\n - Fix a few places that used \"\" or lack of default\n - Fix any broken config by setting \"local\" as default if none exists\n   (and generate a new \"local\" remote if needed).\n\nSigned-off-by: Stéphane Graber <stgraber@ubuntu.com>","distinct":true,"url":"https://api.github.com/repos/lxc/lxd/commits/96e120e828e474be5e29bbed987b81abc0044d98"},{"sha":"19c6961cc1012c8a529f20807328a9357f5034f4","author":{"email":"089afc6d81f66f1168a9849e15660feae286e024@ubuntu.com","name":"Stéphane Graber"},"message":"CVE-2015-1340: Fix race condition between fchown and chmod in idmapset\n\nShifting a container filesystem in an environment where a user can\nmodify the container's filesystem as it's being shifted (for example if\nthe LXD server's / was shared over the network) would allow them to make\nuse of a race (TOCTOU) between the chown and chmod operations, allowing\nfor an arbitrary path to be chmod-ed rather than the planned container\npath.\n\nThe fix is to use a file descriptor to the entry being processed,\nvalidate that the entry itself is sane and then interact with the fd.\n\nThis is CVE-2015-1340\n\nReported-by: Seth Arnold\nSigned-off-by: Stéphane Graber <stgraber@ubuntu.com>","distinct":true,"url":"https://api.github.com/repos/lxc/lxd/commits/19c6961cc1012c8a529f20807328a9357f5034f4"},{"sha":"29bbd2efb99cf78b52862985ce2feb5d3739281b","author":{"email":"089afc6d81f66f1168a9849e15660feae286e024@ubuntu.com","name":"Stéphane Graber"},"message":"Travis: Disable for Linux\n\nThe travis environment doesn't allow running containers and is on a\npretty old kernel which means that the recent CVE fix breaks it all.\n\nLXD is only really supported on 3.13+ Linux kernels due to its use of\nuser namespaces, so let's stop using Travis for Linux testing.\n\nSigned-off-by: Stéphane Graber <stgraber@ubuntu.com>","distinct":true,"url":"https://api.github.com/repos/lxc/lxd/commits/29bbd2efb99cf78b52862985ce2feb5d3739281b"},{"sha":"7fc8a8f21931f4fc09000c21fe7e69c6b4806bf5","author":{"email":"6b523322678240882acbb4da5312a12d8cd0082d@tycho.ws","name":"Tycho Andersen"},"message":"Merge pull request #1189 from stgraber/master\n\nRemote handling and CVE fix","distinct":true,"url":"https://api.github.com/repos/lxc/lxd/commits/7fc8a8f21931f4fc09000c21fe7e69c6b4806bf5"}]}