FEDORA-2026-5af38b7ecb — security update for incus

obsolete

incus-6.23-2.fc43

FEDORA-2026-5af38b7ecb created by ganto 3 months ago for Fedora 43

Update to 6.23

This update has been submitted for testing by ganto.

3 months ago

This update's test gating status has been changed to 'ignored'.

3 months ago

ganto edited this update.

3 months ago

ganto edited this update.

3 months ago

ganto edited this update.

New build(s):

incus-6.23-2.fc43

Removed build(s):

incus-6.23-1.fc43

Karma has been reset.

3 months ago

jurav59 commented & provided feedback 3 months ago

karma

OK ! 2419661 finally fixed !

BZ#2419345 incus-6.23.0 is available

BZ#2419661 incus-agent must be statically linked for VM exec to work

BZ#2436657 Incus VMs do not boot due to unknown audio driver

This update has been pushed to testing.

3 months ago

This update can be pushed to stable now if the maintainer wishes

3 months ago

francisbergin commented & provided feedback 3 months ago

karma

I confirm this fixes the "Error: websocket: bad handshake" error when connecting to an Incus VM.

BZ#2419661 incus-agent must be statically linked for VM exec to work

This update has been obsoleted by incus-6.23-3.fc43.

3 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

3 months ago

in testing

3 months ago

modified

3 months ago

approved

3 months ago

Builds

incus-6.23-2.fc43

BZ#2412713 CVE-2025-58183 incus: Unbounded allocation when parsing GNU sparse map [fedora-43]

BZ#2419345 incus-6.23.0 is available

BZ#2419661 incus-agent must be statically linked for VM exec to work

BZ#2432455 CVE-2026-23954 incus: container image templating arbitrary host file read and write [fedora-43]

BZ#2432457 CVE-2026-23953 incus: container environment configuration newline injection [fedora-43]

BZ#2436657 Incus VMs do not boot due to unknown audio driver

BZ#2441179 CVE-2025-69725 incus: Go-chi/chi: Open Redirect vulnerability allows redirection to malicious websites [fedora-43]

BZ#2452042 CVE-2026-33542 incus: Incus: Image cache poisoning due to insufficient image fingerprint validation [fedora-43]

BZ#2452044 CVE-2026-33897 incus: Incus: Arbitrary file read/write as root via pongo2 template chroot bypass [fedora-43]

BZ#2452046 CVE-2026-33711 incus: Incus: Local privilege escalation or denial of service via predictable temporary file paths [fedora-43]

BZ#2452048 CVE-2026-33743 incus: Incus: Denial of Service via specially crafted storage bucket backup [fedora-43]

BZ#2452106 CVE-2026-33945 incus: Incus: Privilege escalation and denial of service via path traversal in systemd credential configuration [fedora-all]

incus-6.23-2.fc43

Automated Test Results

ignored