Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed

Permalink CVE-2026-3351

updated 4 months, 3 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 3 weeks ago
@LeSuisse ignored
9 packages
- lxd-ui
- lxd-lts
- lxd-image-server
- lxd-unwrapped-lts
- python312Packages.pylxd
- python313Packages.pylxd
- python314Packages.pylxd
- terraform-providers.lxd
- terraform-providers.terraform-lxd_lxd
4 months, 3 weeks ago
@LeSuisse dismissed 4 months, 3 weeks ago

Authorization Bypass in LXD GET /1.0/certificates Endpoint

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

References

Affected products

lxd

==6.6

Ignored packages (9)

pkgs.lxd-ui

None

pkgs.lxd-lts

None

pkgs.lxd-image-server

Creates and manages a simplestreams lxd image server on top of nginx

nixos-unstable 0.0.4
- nixpkgs-unstable 0.0.4
- nixos-unstable-small 0.0.4

pkgs.lxd-unwrapped-lts

None

pkgs.python312Packages.pylxd

None

pkgs.python313Packages.pylxd

Library for interacting with the LXD REST API

nixos-unstable 2.3.7
- nixpkgs-unstable 2.3.7
- nixos-unstable-small 2.3.7

pkgs.python314Packages.pylxd

Library for interacting with the LXD REST API

nixos-unstable 2.3.7
- nixpkgs-unstable 2.3.7
- nixos-unstable-small 2.3.7

pkgs.terraform-providers.lxd

None

nixos-unstable 2.7.0
- nixpkgs-unstable 2.7.0
- nixos-unstable-small 2.7.0

pkgs.terraform-providers.terraform-lxd_lxd

None

nixos-unstable 2.7.0
- nixpkgs-unstable 2.7.0
- nixos-unstable-small 2.7.0

Not present in nixpkgs