CVE-2017-18641

Name of the Vulnerable Software and Affected Versions: LXC version 2.0

Description: The issue concerns the template scripts in LXC that download code over cleartext HTTP without performing a digital-signature check before executing it to bootstrap containers.

Recommendations: For LXC version 2.0, consider modifying the template scripts to use secure HTTP connections and implement digital-signature checks for downloaded code to prevent potential exploitation. As a temporary workaround, restrict the use of these template scripts until a secure version is available.