Suggestions search

All statuses

Filter by:

With package: lxd-lts

Found 2 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-3351

created 1 month, 1 week ago

Authorization Bypass in LXD GET /1.0/certificates Endpoint

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

References

Affected products

lxd

==6.6

Matching in nixpkgs

pkgs.lxd-ui

Web user interface for LXD

pkgs.lxd-lts

Daemon based on liblxc offering a REST API to manage containers

pkgs.lxd-image-server

Creates and manages a simplestreams lxd image server on top of nginx

nixos-unstable 0.0.4
- nixpkgs-unstable 0.0.4
- nixos-unstable-small 0.0.4
nixos-25.11 0.0.4
- nixos-25.11-small 0.0.4
- nixpkgs-25.11-darwin 0.0.4

pkgs.lxd-unwrapped-lts

Daemon based on liblxc offering a REST API to manage containers

pkgs.python312Packages.pylxd

Library for interacting with the LXD REST API

nixos-25.11 2.3.2
- nixos-25.11-small 2.3.2
- nixpkgs-25.11-darwin 2.3.2

pkgs.python313Packages.pylxd

Library for interacting with the LXD REST API

nixos-unstable 2.3.7
- nixpkgs-unstable 2.3.7
- nixos-unstable-small 2.3.7
nixos-25.11 2.3.2
- nixos-25.11-small 2.3.2
- nixpkgs-25.11-darwin 2.3.2

pkgs.python314Packages.pylxd

Library for interacting with the LXD REST API

nixos-unstable 2.3.7
- nixpkgs-unstable 2.3.7
- nixos-unstable-small 2.3.7

pkgs.terraform-providers.lxd

None

nixos-unstable 2.7.0
- nixpkgs-unstable 2.7.0
- nixos-unstable-small 2.7.0
nixos-25.11 2.6.0
- nixos-25.11-small 2.6.0
- nixpkgs-25.11-darwin 2.6.0

pkgs.terraform-providers.terraform-lxd_lxd

None

nixos-unstable 2.7.0
- nixpkgs-unstable 2.7.0
- nixos-unstable-small 2.7.0
nixos-25.11 2.6.0
- nixos-25.11-small 2.6.0
- nixpkgs-25.11-darwin 2.6.0

Package maintainers

@mkg20001 Maciej Krüger <mkg20001+nix@gmail.com>

Untriaged

Permalink CVE-2024-6219

3.8 LOW

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): NONE
Availability impact (A): NONE

created 1 year ago

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, …

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.