Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus
Incus does not verify combined fingerprint when downloading images from simplestreams servers in github.com/lxc/incus
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-33542US | medium4.8 | — | ||
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers op… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/lxc/incus/commit/04e97418189f743411884afb81a3384e6218b8cdFIX
- https://github.com/lxc/incus/commit/4a80447c52d6bc05d3322feeb5395f581e7a80e4FIX
- https://github.com/lxc/incus/commit/72688b7d9400c8f3c17ad0f93a7c1aeb89627307FIX
- https://github.com/lxc/incus/commit/ee26f72524ab60a4abcfd4e52667c52bb24364fcFIX
- https://github.com/lxc/incus/releases/tag/v6.23.0WEB
- https://github.com/lxc/incus/security/advisories/GHSA-p8mm-23gg-jc9rADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan