Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| incus | fixed | 7.0.0-5 | package | |
| lxd | removed | package | ||
| lxd | end-of-life | bookworm | package |
Примечания
https://github.com/lxc/incus/security/advisories/GHSA-2q3f-q5pq-g8wv
https://github.com/canonical/lxd/pull/18590
Связанные уязвимости
CVSS3: 9.9
github
около 1 месяца назад
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image