mirror of
https://github.com/lxc/incus
synced 2026-08-02 05:26:46 +00:00
d0f2c86fcb
systemd credentials name could be abused to escape the credentials folder and allow for arbitrary writes to the host filesystem allowing for privilege escalation and denial of service attacks. We now use Go's OpenRoot (openat2) to restrict all file interactions to the "credentials" directory, avoiding such attacks. This addresses CVE-2026-33945 Reported-by: https://7asecurity.com Signed-off-by: Stéphane Graber <stgraber@stgraber.org> |
||
|---|---|---|
| .. | ||
| drivers | ||
| instancetype | ||
| operationlock | ||
| filter.go | ||
| instance_errors.go | ||
| instance_exec_cmd.go | ||
| instance_interface.go | ||
| instance_utils.go | ||
