It was discovered that LXD, a system container and virtual machine manager, is prone to a local privilege escalation vulnerability if unprivileged users are allowed to access LXD through lxd-user.
Comment
Archive for November 13th, 2025
7 results.
A vulnerability was discovered in the ec2tokens and s3tokens APIs of Keystone, the OpenStack identity service, which may result in authorisation bypass or privilege escalation if /v3/ec2tokens or /v3/s3tokens are reachable by unauthenticated clients.
The system could be made to expose sensitive information.
Several security issues were fixed in the Linux kernel.
A security issue was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Update to Rack 2.2.21
Update to WebKitGTK 2.50.1: Improve text rendering performance. Fix audio playback broken on instagram. Fix rendering of layers with fractional transforms. Fix several crashes and rendering issues.