Description
Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like security.privileged and raw.lxc) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 14 | | =6.0.4-2 || =6.0.4-3 || =6.0.5-1 || =6.0.5-2 || =6.0.5-3 || =6.0.5-4 || =6.0.5-5 || =6.0.5-6 || =6.0.5-7 || =6.0.5-8 || =6.0.6-1 || =6.0.6-2 || =6.0.6-3 || =6.14.0-1~exp1 || =6.15.0-1~exp1 || =6.16.0-1~exp1 || =6.17.0-1~exp1 || =6.20.0-1~exp1 || =6.21.0-1~exp1 || =6.22.0-1~exp1 || =6.23.0-1~exp1 || =7.0.0-1 || =7.0.0-1~bpo13+1 || =7.0.0-2 || =7.0.0-2~bpo13+1 || =7.0.0-3 || =7.0.0-4 || =7.0.0-5 || =7.0.0-5~bpo13+1 || =7.0.1-1 || =7.0.1-1~bpo13+1 || =7.0.1-2~bpo13+1 || >=0 <7.0.1-2 | 7.0.1-2 |
debian 13 | | =6.0.4-2 || =6.0.4-2+deb13u1 || =6.0.4-2+deb13u1~bpo12+1 || =6.0.4-2+deb13u2 || =6.0.4-2+deb13u2~bpo12+1 || =6.0.4-2+deb13u3 || =6.0.4-2+deb13u3~bpo12+1 || =6.0.4-2+deb13u4 || =6.0.4-2+deb13u4~bpo12+1 || =6.0.4-2+deb13u5 || =6.0.4-2+deb13u5~bpo12+1 || =6.0.4-2+deb13u6 || =6.0.4-2+deb13u6~bpo12+1 || =6.0.4-2+deb13u7 || =6.0.4-2+deb13u7~bpo12+1 || =6.0.4-2+deb13u8 || >=0 <6.0.4-2+deb13u9 | 6.0.4-2+deb13u9 |
