[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [BSA-126] Security Update for incus



unsubscribe

On Mon, Nov 10, 2025 at 9:59 PM Mathias Gibbens <gibmat@debian.org> wrote:
Mathias Gibbens uploaded new packages for incus which fixed the
following security problems:

CVE ID         : CVE-2025-64507

It was discovered that Incus, a system container and virtual machine
manager, is prone to a local privilege escalation vulnerability if
unprivileged users are allowed access to Incus through incus-user.

For the bookworm-backports distribution the problems have been fixed in
version 6.0.4-2+deb13u2~bpo12+1.

Reply to: