Canonical Ltd. LXD

• CVE-2024-6219 Low 3.8 Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured. 0.2%
• CVE-2024-6156 Low 3.8 Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store. 0.2%
• CVE-2023-49721 Medium 6.7 An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot. 0.2%