proxmox-lxc-docker-fix

Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...

CVE-2026-100395

A flaw was found in LXC. When a privileged user or process clones an untrusted container, LXC follows symbolic links symlinks while updating the hostname in the target container file system. An attacker with control over the source container can craft a symlink targeting files outside the...

CVE-2026-100395

LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. In LXC 7.0.0 and earlier, lxc-copy and the public liblxc clone API can follow attacker-controlled symbolic links while updating /etc/hostname in a copied container root filesystem...

CVE-2026-100395

In LXC versions 7.0.0 and earlier , the lxc-copy utility and the public liblxc clone() API are vulnerable to improper link resolution . When a privileged process runs as root to clone an untrusted container, it can follow attacker-controlled symbolic links at /etc/hostname or intermediate compone...

CVE-2026-100395 LXC: lxc-copy host-context hostname update follows symlink

LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. In LXC 7.0.0 and earlier, lxc-copy and the public liblxc clone API can follow attacker-controlled symbolic links while updating /etc/hostname in a copied container root filesystem...

CVE-2026-100395 LXC: lxc-copy host-context hostname update follows symlink

LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. In LXC 7.0.0 and earlier, lxc-copy and the public liblxc clone API can follow attacker-controlled symbolic links while updating /etc/hostname in a copied container root filesystem...

CVE-2022-47952

Suggested description lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace...

CLEANSTART-2024-AO47413 lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path

Security vulnerability affects the lxc package. lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path...

Malicious code in changes-lxc-wrapper (PyPI)

Source: kam193 6db4cc796d2ddd54fcbb0a46270cff980f711a93a5fff30675499291d9bc41f8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

MAL-2026-18326 Malicious code in changes-lxc-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d52ec1e761dd5273ea674453301163bdf6e6e60aa5074a4f075cb66eb850a4 setup.py defines a custom install cmdclass InstallWithBeacon that, on pip install, collects the installer's hostname and resolved local IP address an...

Malicious code in changes-lxc-wrapper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23181d1a705554588eb6fb03e8cee4af7e0c815e74d8b40d7bd13a39944ccae9 The distribution changes-lxc-wrapper ships a trivial package whose top-level import name is cacertificates, creating a mismatch between the...

Malicious Package

Overview changes-lxc-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

LXC Incus backlink vulnerability

Versions prior to LXC Incus 6.0.7, from 6.1.0 up to versions prior to 7.0.2, and from 7.1.0 up to versions prior to 7.5.0 are affected by a backlink vulnerability. This vulnerability stems from an arbitrary file write issue in sftpRecursivePullFile. A malicious incus-agent can bypass target...

LXC Incus authorization issue vulnerability

Versions LXC Incus prior to 6.0.5 through 6.0.7, 6.12.0 prior to 7.0.2, and 7.1.0 prior to 7.5.0 contain an authorization issue vulnerability. This vulnerability arises because restricted project users can use cluster refresh requests to perform pull mode migrations. Attackers with instance...

LXC Incus authorization issue vulnerability

Versions prior to LXC Incus 6.0.7, from 6.1.0 up to versions prior to 7.0.2, and from 7.1.0 up to versions prior to 7.5.0 contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks on GET /1.0/operations/uuid. It may allow clients with restricted...

LXC Incus backlink vulnerability

Versions prior to LXC Incus 6.0.7, from 6.1.0 up to versions prior to 7.0.2, and from 7.1.0 up to versions prior to 7.5.0 are affected by a backlink vulnerability. This vulnerability arises because malicious attackers can write host files by inserting symbolic links within transport volumes...

LXC Incus path traversal vulnerability

Versions 7.0.0 prior to LXC Incus 7.0.2 and 7.1.0 prior to 7.5.0 contain a path traversal vulnerability. This vulnerability stems from the failure to validate custom volume names referenced in instance backup index.yaml files. It may allow attackers to create root directories containing controlle...

LXC Incus trust management issue vulnerability

Versions LXC Incus prior to 6.0.3 through 6.0.7, 6.6.0 through 7.0.2, and 7.1.0 through 7.5.0 contain a trust management vulnerability stemming from improper authorization. This allows restricted TLS clients to read bucket keys stored in default projects. Attackers can query the bucket key endpoi...

LXC Incus permission and access control issue vulnerability

Versions prior to LXC Incus 7.0.2—specifically 7.0.1 and versions prior to 7.5.0 but including 7.2.0—are affected by a permission and access control vulnerability stemming from authorization bypass. Restricted clients can exploit this by omitting “source.type” in their POST requests directed at...

LXC Incus command injection vulnerability

Versions LXC Incus from 7.3.0 through 7.5.0 contain a command injection vulnerability. This vulnerability stems from the ability to bypass project restrictions; restricted project users can set block.createoptions via volume updates, copying, and moving operations. This allows them to trigger...