Re: [BSA-126] Security Update for incus

Jacek Mirgos <[email protected]> Wed, 12 Nov 2025 12:41:28 +0100

Newsgroups	gmane.linux.debian.backports.general
Message-ID	<CAMVvE2xM_DDdcmFPKWVR9rOUaHzby4j7aTQpLNp5pq_Bd3aKog@mail.gmail.com>

unsubscribe

On Mon, Nov 10, 2025 at 9:59 PM Mathias Gibbens <[email protected]> wrote:

> Mathias Gibbens uploaded new packages for incus which fixed the
> following security problems:
>
> CVE ID         : CVE-2025-64507
>
> It was discovered that Incus, a system container and virtual machine
> manager, is prone to a local privilege escalation vulnerability if
> unprivileged users are allowed access to Incus through incus-user.
>
> For the bookworm-backports distribution the problems have been fixed in
> version 6.0.4-2+deb13u2~bpo12+1.
>