mirror of
https://github.com/lxc/incus
synced 2026-08-02 05:26:46 +00:00
LXC doesn't currently have a syntax to hold a multi-line environment variable in its configuration. The use of multi-line environment variables leads to a corrupted configuration file and to a security issue where additional lines may be added by an unprivileged user to escalate their privileges. This fixes CVE-2026-23953. Reported-by: Rory McNamara <rory.mcnamara@snyk.io> Signed-off-by: Stéphane Graber <stgraber@stgraber.org> |
||
|---|---|---|
| .. | ||
| action.go | ||
| config.go | ||
| device.go | ||
| expiry.go | ||
| snapshot.go | ||