-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 29 Oct 2026 22:31:36 +0000
Source: incus
Binary: golang-github-lxc-incus-dev
Architecture: all
Version: 6.0.4-2+deb13u12
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 golang-github-lxc-incus-dev - Powerful system container and virtual machine manager - library
Changes:
 incus (6.0.4-2+deb13u12) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - GHSA-5pgx-q9xx-j3qv
     - GHSA-jcw9-v2ff-8m79
     - GHSA-xg75-xf37-cph9
     - GHSA-p45f-gqqj-6qq3
     - GHSA-cwg9-8mc4-hf7j
     - GHSA-5c64-j5m6-8433
     - GHSA-9c46-v3hw-v6m8
     - GHSA-h2j8-4crh-vhfc
     - GHSA-8r3h-vc36-6xpx
     - GHSA-x6pw-mh5w-pq73
     - GHSA-pf5w-m8m6-5265
     - GHSA-f7xp-22ph-v444
     - GHSA-9f75-5fjw-5jvv
   * Cherry-pick upstream fix to properly enforce
     restricted.virtual-machines.lowlevel when creating a VM (thanks to
     Whitelify for identifying the missing fix in trixie)
Checksums-Sha1:
 daef30adb0374c7549ab7e0ce13b80f742f3502f 1597760 golang-github-lxc-incus-dev_6.0.4-2+deb13u12_all.deb
 8d26f3f934c8610eb70dab4e85b44b25ed248611 17878 incus_6.0.4-2+deb13u12_all-buildd.buildinfo
Checksums-Sha256:
 f3b63ad7c8acdfc47b700abca3fe6b6ef49a6fee4e5ed345783b4b471956150d 1597760 golang-github-lxc-incus-dev_6.0.4-2+deb13u12_all.deb
 d623fe42d2402f5b67c0e4f337f6292485ff00baad386e28c55833284355ef1b 17878 incus_6.0.4-2+deb13u12_all-buildd.buildinfo
Files:
 2e14f8d9ba3e56cc12b1e8a202f0e047 1597760 golang optional golang-github-lxc-incus-dev_6.0.4-2+deb13u12_all.deb
 8bbfde9356719d290ec10f712fbf3b81 17878 admin optional incus_6.0.4-2+deb13u12_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=wJbb
-----END PGP SIGNATURE-----