-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 29 Oct 2026 22:31:36 +0000
Source: incus
Binary: incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym
Architecture: amd64
Version: 6.0.4-2+deb13u12
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 incus      - Powerful system container and virtual machine manager - daemon
 incus-agent - Incus guest agent
 incus-base - Powerful system container and virtual machine manager - daemon (c
 incus-client - Powerful system container and virtual machine manager - client
 incus-extra - Powerful system container and virtual machine manager - extra too
Changes:
 incus (6.0.4-2+deb13u12) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - GHSA-5pgx-q9xx-j3qv
     - GHSA-jcw9-v2ff-8m79
     - GHSA-xg75-xf37-cph9
     - GHSA-p45f-gqqj-6qq3
     - GHSA-cwg9-8mc4-hf7j
     - GHSA-5c64-j5m6-8433
     - GHSA-9c46-v3hw-v6m8
     - GHSA-h2j8-4crh-vhfc
     - GHSA-8r3h-vc36-6xpx
     - GHSA-x6pw-mh5w-pq73
     - GHSA-pf5w-m8m6-5265
     - GHSA-f7xp-22ph-v444
     - GHSA-9f75-5fjw-5jvv
   * Cherry-pick upstream fix to properly enforce
     restricted.virtual-machines.lowlevel when creating a VM (thanks to
     Whitelify for identifying the missing fix in trixie)
Checksums-Sha1:
 fddad1e7e35e0774bac14cc7ed560392b0719ca8 5686532 incus-agent-dbgsym_6.0.4-2+deb13u12_amd64.deb
 090363eba95245039f03e03e4ee73266c63e5ac1 4416248 incus-agent_6.0.4-2+deb13u12_amd64.deb
 4641f144c75c0e66c8d755ca1608f1c0a3b8781c 18017316 incus-base-dbgsym_6.0.4-2+deb13u12_amd64.deb
 42d73c04b4c8e72dd8f2880e1453a495a0a769d9 17590192 incus-base_6.0.4-2+deb13u12_amd64.deb
 b83899a4f669a93da9764b78b1f0432c8e37fc0a 5748608 incus-client-dbgsym_6.0.4-2+deb13u12_amd64.deb
 cafa23481b8dd9c30b671d04964cb7e8b33a6cd5 5346608 incus-client_6.0.4-2+deb13u12_amd64.deb
 eed7c3539cf06e4f7565b19c183a8bd8ee2d0c90 23831604 incus-extra-dbgsym_6.0.4-2+deb13u12_amd64.deb
 29d310475b65677f121fcd6f65d45ed2f5a6be74 20298808 incus-extra_6.0.4-2+deb13u12_amd64.deb
 a415ed3bf22e84068773cc030c8f4194326fb156 20273 incus_6.0.4-2+deb13u12_amd64-buildd.buildinfo
 eb3f5d6fb30ec65adc2604a0e1106800874b6ba6 9792 incus_6.0.4-2+deb13u12_amd64.deb
Checksums-Sha256:
 6bde60a38af08a0dd022c69e85be1817860a4befac1a86e0e30ca32a3f23a91c 5686532 incus-agent-dbgsym_6.0.4-2+deb13u12_amd64.deb
 314299af339b4bc007028cdf7d3602e1520f3b00aa76dc51fd3a92d30e8bd4e2 4416248 incus-agent_6.0.4-2+deb13u12_amd64.deb
 bfa52dc4e28823bbbf71015556330c71975bcebd0e9cedb8aa71fc2a442b63cf 18017316 incus-base-dbgsym_6.0.4-2+deb13u12_amd64.deb
 a40471663d9b57be1d0ec73f5f4bca3729748bdf989e6ec2fecfeafd170b4028 17590192 incus-base_6.0.4-2+deb13u12_amd64.deb
 4a4256c87a915459b5069d2f06fc995019ba7e3f33cb94aba3ec272395089108 5748608 incus-client-dbgsym_6.0.4-2+deb13u12_amd64.deb
 e07c50b3bcdd0eaba2017737f93b3c16cb204b629aaa53d4fd8752cd5fa05a5f 5346608 incus-client_6.0.4-2+deb13u12_amd64.deb
 7d36f9772079edc24b4a8f06b06cb04999311edc3e778cf57a9a8cc4cdef58e2 23831604 incus-extra-dbgsym_6.0.4-2+deb13u12_amd64.deb
 c2207a4914ef81688288498dd273768c4a2b829ea897671b8b91f5b1fe37b995 20298808 incus-extra_6.0.4-2+deb13u12_amd64.deb
 94e98572920c7cbded1866c1c1e4faba5badf93ff311c60b8e342c29ca449236 20273 incus_6.0.4-2+deb13u12_amd64-buildd.buildinfo
 f1297d02613e7c4d58bb03171e20627f9c7b0bbbdf678f90b78ca0b7e5f2e0e8 9792 incus_6.0.4-2+deb13u12_amd64.deb
Files:
 ec41d0a632472da8ed103ed40b3aa017 5686532 debug optional incus-agent-dbgsym_6.0.4-2+deb13u12_amd64.deb
 59a88fa30ed78c1d53b43683c961463c 4416248 admin optional incus-agent_6.0.4-2+deb13u12_amd64.deb
 20f8e9fcdc3d153aac802da463246b43 18017316 debug optional incus-base-dbgsym_6.0.4-2+deb13u12_amd64.deb
 7013638b46cacb4eb2a47741afd0e598 17590192 admin optional incus-base_6.0.4-2+deb13u12_amd64.deb
 ca40a282fda6deff61053e8ab4963ceb 5748608 debug optional incus-client-dbgsym_6.0.4-2+deb13u12_amd64.deb
 2adc9b086ad8db6c04a14186e871cfdf 5346608 admin optional incus-client_6.0.4-2+deb13u12_amd64.deb
 bffffe5bf149b38134e6c2dd9a1337e2 23831604 debug optional incus-extra-dbgsym_6.0.4-2+deb13u12_amd64.deb
 209484ca9afef21db057adeaf37ae1a5 20298808 admin optional incus-extra_6.0.4-2+deb13u12_amd64.deb
 00da86dc63d9d983cd736fcc43fea94b 20273 admin optional incus_6.0.4-2+deb13u12_amd64-buildd.buildinfo
 fa455ca24ab39737441a510bb5b7b331 9792 admin optional incus_6.0.4-2+deb13u12_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=Rd/e
-----END PGP SIGNATURE-----