tocsin

Debian/incus: high 7.1

Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage bucket keys in the default proj

Action: Upgrade incus to 6.0.4-2+deb13u11 or later.

Affected

introducedfixedlast affected
06.0.4-2+deb13u11-

Fixed versions

6.0.4-2+deb13u11

Sources

published · modified · JSON