Skip to content

LXD

v7.2.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

cloud containers virtual-machines

Affected surfaces

auth

Summary

AI summary

Broad release touches incus, doc, doc/cloud-init, and incusd.

Full changelog

What's Changed

  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3428
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3433
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3432
  • shared/tls: Detect Lego version/behavior based on help by @stgraber in https://github.com/lxc/incus/pull/3435
  • doc/cloud-init: Clarify VM behavior by @stgraber in https://github.com/lxc/incus/pull/3436
  • Fix Github Actions java setup by @stgraber in https://github.com/lxc/incus/pull/3438
  • incus: Make unset commands accept several keys by @bensmrs in https://github.com/lxc/incus/pull/3439
  • Add migration-compatible hv flags with migration.stateful=true by @masnax in https://github.com/lxc/incus/pull/3442
  • Generate-database joinas tag by @masnax in https://github.com/lxc/incus/pull/3443
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3444
  • Align node specific network config by @breml in https://github.com/lxc/incus/pull/3441
  • Fix block backup issues by @stgraber in https://github.com/lxc/incus/pull/3448
  • Remove LXD to Incus logic by @stgraber in https://github.com/lxc/incus/pull/3451
  • Storage migration/recovery related fixes by @stgraber in https://github.com/lxc/incus/pull/3452
  • OVS/OVN related fixes by @stgraber in https://github.com/lxc/incus/pull/3453
  • Cluster evacuation improvements by @stgraber in https://github.com/lxc/incus/pull/3455
  • global: Clean latest gofumpt by @stgraber in https://github.com/lxc/incus/pull/3456
  • incusd: Replace gorilla/mux with http.ServeMux by @stgraber in https://github.com/lxc/incus/pull/3458
  • Improve low level backup API by @stgraber in https://github.com/lxc/incus/pull/3457
  • Implement a filtered version of the Server struct by @stgraber in https://github.com/lxc/incus/pull/3462
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3461
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3465
  • Add logging helper for deferred functions and use in all packages by @stgraber in https://github.com/lxc/incus/pull/3464
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3466
  • Implement server.crt update through internal API by @stgraber in https://github.com/lxc/incus/pull/3463
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3474
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3475
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3481
  • doc: Improve incus alias docs by @augustodsgv in https://github.com/lxc/incus/pull/3479
  • Update debug.go by @kazan417 in https://github.com/lxc/incus/pull/3469
  • incus/server/storage/driver/ceph: Shrink images to minimal size after unpacking by @DarkressX in https://github.com/lxc/incus/pull/3486
  • Handle concurrent NBD connections on instance endpoint by @stgraber in https://github.com/lxc/incus/pull/3482
  • doc/incus-cli: Add CLI configuration file reference by @augustodsgv in https://github.com/lxc/incus/pull/3483
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3489
  • doc: Update preseed description to match with reality by @stgraber in https://github.com/lxc/incus/pull/3490
  • doc: Ignore criu.org link checking by @bensmrs in https://github.com/lxc/incus/pull/3493
  • incus/utils_copy: Fix wrong error returned by @bensmrs in https://github.com/lxc/incus/pull/3492
  • Implement per-instance BGP by @stgraber in https://github.com/lxc/incus/pull/3491
  • Incus/add remote set keepalive by @augustodsgv in https://github.com/lxc/incus/pull/3495
  • Add core.https_allowed_websocket_origin by @stgraber in https://github.com/lxc/incus/pull/3496
  • incus: Close web UI probe response body by @fwerkor in https://github.com/lxc/incus/pull/3497
  • ci: authenticate OpenFGA release lookups by @fwerkor in https://github.com/lxc/incus/pull/3502
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3503
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3509
  • Fix allow cached shared image to grow by @DarkressX in https://github.com/lxc/incus/pull/3504
  • Update AI/LLM policy by @stgraber in https://github.com/lxc/incus/pull/3506
  • Authentication / connection bugfixes by @stgraber in https://github.com/lxc/incus/pull/3505
  • storage/zfs: avoid raw send for snapshot copies by @fwerkor in https://github.com/lxc/incus/pull/3501
  • incusd/storage/drivers: Add "btrfs.compression" volume option by @cmspam in https://github.com/lxc/incus/pull/3511
  • incusd/device/disk: Use virtiofsd --posix-acl=auto if supported by @germag in https://github.com/lxc/incus/pull/3468
  • incus/server/storage/driver/ceph: Don't return error if image size is larger than cached image size by @DarkressX in https://github.com/lxc/incus/pull/3516
  • build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/lxc/incus/pull/3518
  • doc/cloud-init: Change YAML spec domain by @bensmrs in https://github.com/lxc/incus/pull/3524
  • incusd/storage/btrfs: Fix daemon dir prefix check by @bensmrs in https://github.com/lxc/incus/pull/3523
  • Allow static network configuration for OCI containers by @stgraber in https://github.com/lxc/incus/pull/3522
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3527
  • incusd/endpoints: Fix infinite loop in network error log writer by @stgraber in https://github.com/lxc/incus/pull/3531
  • Fix missing QCOW2 overhead on LVM cluster LVs by @stgraber in https://github.com/lxc/incus/pull/3537
  • Use OS-specific CLI paths by @stgraber in https://github.com/lxc/incus/pull/3534
  • Various bugfixes by @stgraber in https://github.com/lxc/incus/pull/3539
  • Add version specific QEMU args according to image.os and image.release by @masnax in https://github.com/lxc/incus/pull/3529
  • incusd: Skip NVRAM setup for unified AMD SEV firmware by @stgraber in https://github.com/lxc/incus/pull/3538
  • incusd/storage/zfs: Batch snapshot GUID lookups by @stgraber in https://github.com/lxc/incus/pull/3530
  • incusd/storage/drivers: Fix btrfs.compression=none and pool-wide default by @cmspam in https://github.com/lxc/incus/pull/3540
  • Configurable port_guid/node_guid for SR-IOV infiniband by @stgraber in https://github.com/lxc/incus/pull/3533
  • Use instance IP detection mechanism for proxy devices by @stgraber in https://github.com/lxc/incus/pull/3528
  • incus: Add default command by @augustodsgv in https://github.com/lxc/incus/pull/3499
  • Improve and extend SELinux support by @mschiff in https://github.com/lxc/incus/pull/3216
  • Security fixes by @stgraber in https://github.com/lxc/incus/pull/3542
  • incusd/storage: Recreate missing snapshot config subvolume by @stgraber in https://github.com/lxc/incus/pull/3546
  • Translations update from Hosted Weblate by @weblate in https://github.com/lxc/incus/pull/3544
  • Fix typo in documented behavior in setting restricted.containers.privilege to isolated by @Hye-Dev in https://github.com/lxc/incus/pull/3545

New Contributors

  • @augustodsgv made their first contribution in https://github.com/lxc/incus/pull/3479
  • @fwerkor made their first contribution in https://github.com/lxc/incus/pull/3497
  • @germag made their first contribution in https://github.com/lxc/incus/pull/3468

Full Changelog: https://github.com/lxc/incus/compare/v7.1.0...v7.2.0

Security Fixes

  • Security fixes (details not specified in changelog)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track LXD

Get notified when new releases ship.

Sign up free

About LXD

Container "hypervisor" and a better UX for LXC.

All releases →

Related context

Beta — feedback welcome: [email protected]