Debian/incus: critical 9.6
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instan
Action: Upgrade incus to 7.0.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.1-5 | - |
Fixed versions
| 7.0.1-5 |
Sources
- osv: DEBIAN-CVE-2026-85185#Debian:14/incus
- https://security-tracker.debian.org/tracker/CVE-2026-85185
published · modified · JSON