[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1120520: trixie-pu: package lxd/5.0.2+git20231211.1364ae4-9+deb13u2



Control: tags -1 + confirmed

On Tue, 2025-11-11 at 16:51 +0000, Mathias Gibbens wrote:
> While investigating CVE-2025-64507, I discovered that filesystem ID
> mapping is broken for LXD in trixie. This renders the attack
> unexploitable (yay!) but is a regression for anyone who wants/needs
> to setup filesystem ID mapping.
> 
> After discussion with the Security Team, I have prepared this updated
> version of LXD that fixes both the ID mapping and relevant CVE. 

Please go ahead.

Regards,

Adam


Reply to: