Debian/incus: critical 9.9
Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories
Action: Upgrade incus to 6.0.4-2+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.4-2+deb13u1 | - |
Fixed versions
| 6.0.4-2+deb13u1 |
Sources
published · modified · JSON