Bug#1120520: trixie-pu: package lxd/5.0.2+git20231211.1364ae4-9+deb13u2
Control: tags -1 + confirmed
On Tue, 2025-11-11 at 16:51 +0000, Mathias Gibbens wrote:
> While investigating CVE-2025-64507, I discovered that filesystem ID
> mapping is broken for LXD in trixie. This renders the attack
> unexploitable (yay!) but is a regression for anyone who wants/needs
> to setup filesystem ID mapping.
>
> After discussion with the Security Team, I have prepared this updated
> version of LXD that fixes both the ID mapping and relevant CVE.
Please go ahead.
Regards,
Adam
Reply to: