canonical/multipass v1.17.1

1.17.1

on GitHub

This Multipass 1.17.1 patch release fixes a vulnerability related to the transfer of files and an issue related to expanding ~ for target paths.

Vulnerability & bug fixes

• [sftp] Fix a potential vulnerability where a compromised instance could send malicious target paths to the host when executing multipass transfer leading to host files being changed without the user's consent. (#5460)
• [qemu] Expand "~" correctly for target paths (#5417)

Changes

See also the full diff: v1.17.0...v1.17.1.

Feedback

Please file issues on the Multipass GitHub for problems and feature requests, or join the Multipass Discourse forum to chat. You can also find us in the Multipass room on Matrix.