Go/github.com/canonical/lxd CVE-2024-6156: low 3.8, EPSS 0.16%
CA certificate sign check bypass in github.com/canonical/lxd
Action: Upgrade github.com/canonical/lxd to 0.0.0-20240708073652-5a492a3f0036 or later.
go get github.com/canonical/lxd@v0.0.0-20240708073652-5a492a3f0036Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20240708073652-5a492a3f0036 |
Sources
- osv: GO-2024-3312
- nvd: CVE-2024-6156
- https://github.com/canonical/lxd/security/advisories/GHSA-4c49-9fpc-hc3v
- https://github.com/canonical/lxd/commit/92468bb60f4f1edf38ff0434414bea4f28afa711
CVE-2024-6156 · published · modified · JSON