Description
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with can_create_images and can_create_instances) can execute arbitrary code as root on the host. A crafted image ships backup.yaml as a symlink to a host file. When the root daemon writes the instance's backup file, it follows the symlink. Version 7.3.0 patches the issue.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 13 | | =6.0.4-2 || =6.0.4-2+deb13u1 || =6.0.4-2+deb13u1~bpo12+1 || =6.0.4-2+deb13u2 || =6.0.4-2+deb13u2~bpo12+1 || =6.0.4-2+deb13u3 || =6.0.4-2+deb13u3~bpo12+1 || =6.0.4-2+deb13u4 || =6.0.4-2+deb13u4~bpo12+1 || =6.0.4-2+deb13u5 || =6.0.4-2+deb13u5~bpo12+1 || =6.0.4-2+deb13u6 || =6.0.4-2+deb13u6~bpo12+1 || =6.0.4-2+deb13u7 || =6.0.4-2+deb13u7~bpo12+1 || =6.0.4-2+deb13u8 || >=0 <6.0.4-2+deb13u9 | 6.0.4-2+deb13u9 |
debian 14 | | =6.0.4-2 || =6.0.4-3 || =6.0.5-1 || =6.0.5-2 || =6.0.5-3 || =6.0.5-4 || =6.0.5-5 || =6.0.5-6 || =6.0.5-7 || =6.0.5-8 || =6.0.6-1 || =6.0.6-2 || =6.0.6-3 || =6.14.0-1~exp1 || =6.15.0-1~exp1 || =6.16.0-1~exp1 || =6.17.0-1~exp1 || =6.20.0-1~exp1 || =6.21.0-1~exp1 || =6.22.0-1~exp1 || =6.23.0-1~exp1 || =7.0.0-1 || =7.0.0-1~bpo13+1 || =7.0.0-2 || =7.0.0-2~bpo13+1 || =7.0.0-3 || =7.0.0-4 || =7.0.0-5 || =7.0.0-5~bpo13+1 || =7.0.1-1 || =7.0.1-1~bpo13+1 || =7.0.1-2~bpo13+1 || >=0 <7.0.1-2 | 7.0.1-2 |
