Skip to content

LXD

v7.1.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

cloud containers virtual-machines

Summary

AI summary

Broad release touches incusd/instance/qemu, incusd/devices, doc/devices/disk, and doc/authorization.

Full changelog

What's Changed

  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3296
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3298
  • doc/devices/disk: Fix broken link by @stgraber in https://github.com/lxc/incus/pull/3297
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3309
  • Fix some initial 7.0 issues by @stgraber in https://github.com/lxc/incus/pull/3311
  • Fix some network issues by @stgraber in https://github.com/lxc/incus/pull/3312
  • doc/authorization: Fix reference to old "manager" relation by @stgraber in https://github.com/lxc/incus/pull/3313
  • incusd/projects: Fix targeting on project delete by @stgraber in https://github.com/lxc/incus/pull/3315
  • incusd/network/acl: Fix issue with instances in different project tha… by @stgraber in https://github.com/lxc/incus/pull/3314
  • incusd/instance/qemu: Remove deprecated QEMU flag by @stgraber in https://github.com/lxc/incus/pull/3318
  • Fix NBD swagger by @stgraber in https://github.com/lxc/incus/pull/3317
  • incusd/cluster: Skip operation creation on shutdown evacuate by @stgraber in https://github.com/lxc/incus/pull/3320
  • Fix some simple bugs by @stgraber in https://github.com/lxc/incus/pull/3325
  • Implement bridge.multicast_snooping by @stgraber in https://github.com/lxc/incus/pull/3327
  • Add lock handling for NBD operations by @presztak in https://github.com/lxc/incus/pull/3331
  • devcontainer: fix golangci-lint install source by @breml in https://github.com/lxc/incus/pull/3336
  • build(deps): bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in https://github.com/lxc/incus/pull/3338
  • Restore config volume as part of VM block restoration (LVM storage) by @presztak in https://github.com/lxc/incus/pull/3343
  • Update Ansible section with incus-client details by @chrisjsimpson in https://github.com/lxc/incus/pull/3345
  • Update list of Ubuntu LTS releases that get pre-built Incus packages by @meeque in https://github.com/lxc/incus/pull/3346
  • Use correct host:port format for ClusterAddress by @stephendotcarter in https://github.com/lxc/incus/pull/3349
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3352
  • doc/storage_volume: Fix outdated information by @bensmrs in https://github.com/lxc/incus/pull/3360
  • test: Disable volume shrinking with LINSTOR by @bensmrs in https://github.com/lxc/incus/pull/3354
  • incusd/storage/s3: Implement S3 CopyObject by @stgraber in https://github.com/lxc/incus/pull/3365
  • Allow volume creation on attach by @stgraber in https://github.com/lxc/incus/pull/3363
  • Add workaround for lvmcluster pool removal by @presztak in https://github.com/lxc/incus/pull/3369
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3370
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3362
  • Performance improvements by @stgraber in https://github.com/lxc/incus/pull/3372
  • Fix forward duplicate ip check by @DarkressX in https://github.com/lxc/incus/pull/3373
  • doc: Extend description for OCI-compliant remotes by @UweKrause in https://github.com/lxc/incus/pull/3374
  • incus/operation: Fix default column layout in help text by @urbalazs in https://github.com/lxc/incus/pull/3347
  • Fix another set of explanation typos. by @kazan417 in https://github.com/lxc/incus/pull/3299
  • incusd/instance/qemu: add virtio vga feature gating by @damex in https://github.com/lxc/incus/pull/3305
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3376
  • Add support for block.create_options by @stgraber in https://github.com/lxc/incus/pull/3377
  • incus/utils: Tweak environment file handling to strip matching outer … by @stgraber in https://github.com/lxc/incus/pull/3378
  • shared/archive: Improved ENOSPC detection by @stgraber in https://github.com/lxc/incus/pull/3379
  • Allow setting up a TPM certificate authority by @stgraber in https://github.com/lxc/incus/pull/3380
  • incusd/devices: Set volatileGet on Refresh by @stgraber in https://github.com/lxc/incus/pull/3381
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3384
  • Update cluster.go by @kazan417 in https://github.com/lxc/incus/pull/3383
  • Update network_forward.go by @kazan417 in https://github.com/lxc/incus/pull/3387
  • incus/config: Fix YAML file name in help text by @urbalazs in https://github.com/lxc/incus/pull/3390
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3393
  • Fix incus-simplestreams issues by @stgraber in https://github.com/lxc/incus/pull/3391
  • Fix forkdhcp issues by @stgraber in https://github.com/lxc/incus/pull/3392
  • Allow editing raw LINSTOR properties by @bensmrs in https://github.com/lxc/incus/pull/3396
  • Implement ranges in network address sets by @stgraber in https://github.com/lxc/incus/pull/3394
  • incusd/network/ovn: Use dnat_and_snat for fully mapped external addre… by @stgraber in https://github.com/lxc/incus/pull/3397
  • Enable TPM live migration by @presztak in https://github.com/lxc/incus/pull/3398
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3399
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3400
  • Fix push behavior with UID/GID/mode overrides by @bensmrs in https://github.com/lxc/incus/pull/3401
  • More bugfixes by @stgraber in https://github.com/lxc/incus/pull/3395
  • Fix remaining golangci-lint issues by @stgraber in https://github.com/lxc/incus/pull/3405
  • Always return the total disk size on instances by @stgraber in https://github.com/lxc/incus/pull/3402
  • More codebase cleanup by @stgraber in https://github.com/lxc/incus/pull/3407
  • VLAN filtering fixes by @stgraber in https://github.com/lxc/incus/pull/3408
  • incusd/instance/lxc: Use os.Root for templating by @stgraber in https://github.com/lxc/incus/pull/3403
  • Implement storage volume rebuild by @stgraber in https://github.com/lxc/incus/pull/3404
  • Add support for static round-robin remotes by @bensmrs in https://github.com/lxc/incus/pull/3409
  • Implement S3 pre-signed URLs by @stgraber in https://github.com/lxc/incus/pull/3411
  • client: handle absolute paths for simplestream files by @breml in https://github.com/lxc/incus/pull/3414
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3413
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3419
  • Fix daemon volume accounting by @bensmrs in https://github.com/lxc/incus/pull/3412
  • CLI wording fixes by @kazan417 in https://github.com/lxc/incus/pull/3416
  • Allow for specific VM vCPU configuration by @stgraber in https://github.com/lxc/incus/pull/3420
  • Push operation follow-up by @bensmrs in https://github.com/lxc/incus/pull/3418
  • incusd/devices: Cleanup leftover forkproxy on startup by @stgraber in https://github.com/lxc/incus/pull/3421
  • Fix security issues for Incus 7.1 by @stgraber in https://github.com/lxc/incus/pull/3425
  • Adjust instance-agent events by @stgraber in https://github.com/lxc/incus/pull/3426
  • Fix a couple of issues with instance memory changes by @stgraber in https://github.com/lxc/incus/pull/3427
  • Add additional validation to device names by @stgraber in https://github.com/lxc/incus/pull/3423

New Contributors

  • @chrisjsimpson made their first contribution in https://github.com/lxc/incus/pull/3345
  • @meeque made their first contribution in https://github.com/lxc/incus/pull/3346
  • @stephendotcarter made their first contribution in https://github.com/lxc/incus/pull/3349

Full Changelog: https://github.com/lxc/incus/compare/v7.0.0...v7.1.0

Breaking Changes

  • incusd/instance/qemu: Remove deprecated QEMU flag

Security Fixes

  • Fix security issues for Incus 7.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track LXD

Get notified when new releases ship.

Sign up free

About LXD

Container "hypervisor" and a better UX for LXC.

All releases →

Related context

Beta — feedback welcome: [email protected]