Debian/incus: critical 9.9
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transf
Action: Upgrade incus to 7.0.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.1-5 | - |
Fixed versions
| 7.0.1-5 |
Sources
- osv: DEBIAN-CVE-2026-115377#Debian:14/incus
- https://security-tracker.debian.org/tracker/CVE-2026-115377
published · modified · JSON