tocsin

Debian/lxd: critical 9.9

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted `Incus-Image-Hash` h

Action: Upgrade lxd to 5.0.2+git20231211.1364ae4-9+deb13u7 or later.

Affected

introducedfixedlast affected
05.0.2+git20231211.1364ae4-9+deb13u7-

Fixed versions

5.0.2+git20231211.1364ae4-9+deb13u7

Sources

published · modified · JSON