Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| incus | fixed | 7.0.0-5 | package | |
| lxd | removed | package | ||
| lxd | end-of-life | bookworm | package |
Примечания
https://github.com/lxc/incus/security/advisories/GHSA-vxp5-584q-c479
https://github.com/lxc/incus/commit/cbefa31ae0da8fd96361178aed3a3c631e098fef (v7.2.0)
https://github.com/canonical/lxd/pull/18590
Связанные уязвимости
CVSS3: 9.9
github
около 2 месяцев назад
Incus has arbitrary file read+write on host via templates/ symlink in malicious image