EUVD-2024-1086

Malicious code in bioql PyPI...

GO-2024-2692 Pebble service manager's file pull API allows access by any user in github.com/canonical/pebble

Pebble service manager's file pull API allows access by any user in github.com/canonical/pebble...

CVE-2024-3250

It was discovered that Canonical's Pebble service manager read-file API and the associated pebble pull command, before v1.10.2, allowed unprivileged local users to read files with root-equivalent permissions when Pebble was running as root. Fixes are also available as backports to v1.1.1, v1.4.2,...

Pebble 安全漏洞

Canonical Pebble is a lightweight, API-driven process manager from Canonical, UK. A security vulnerability exists in Pebble that stems from a file pulling API that allows any user to access the Pebble server.Affected products and versions: canonical/pebble v1.4.1, v1.7.3, v1.10.1...