GHSA-pjff-c2wc-f6jm: LXD has arbitrary file write on client due to trusted image hash

Severity: critical. Reported from https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x ### Summary An arbitrary file write exists in the Incus client when a malicious image server returns a crafted `Incus-Image-Hash` header. This can lead to arbitrary command execution as root on the server. ### Det

Читать первоисточник →