57 points | by paaloeye 14 hours ago ago
8 comments
> full access to the cluster and managed virtual machines via a crafted certificate chain
WebPKI is cooking lately
-85 moderation, haven't seen that! https://news.social-protocols.org/stats?id=50310937
Does this impact Incus or is it just LXD?
"This vulnerability was referred to us from the Incus project, and was confirmed to affect LXD as well."
- https://discourse.ubuntu.com/t/security-advisory-critical-vu...
This only impacts LXD.
You’d be surprised who is running LXD at scale. OVH is one big name.
cve.now discussion: https://news.ycombinator.com/item?id=50310926
> full access to the cluster and managed virtual machines via a crafted certificate chain
WebPKI is cooking lately
-85 moderation, haven't seen that! https://news.social-protocols.org/stats?id=50310937
Does this impact Incus or is it just LXD?
"This vulnerability was referred to us from the Incus project, and was confirmed to affect LXD as well."
- https://discourse.ubuntu.com/t/security-advisory-critical-vu...
This only impacts LXD.
You’d be surprised who is running LXD at scale. OVH is one big name.
cve.now discussion: https://news.ycombinator.com/item?id=50310926