-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 29 Oct 2026 22:31:36 +0000
Source: incus
Binary: incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym
Architecture: i386
Version: 6.0.4-2+deb13u12
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 incus      - Powerful system container and virtual machine manager - daemon
 incus-agent - Incus guest agent
 incus-base - Powerful system container and virtual machine manager - daemon (c
 incus-client - Powerful system container and virtual machine manager - client
 incus-extra - Powerful system container and virtual machine manager - extra too
Changes:
 incus (6.0.4-2+deb13u12) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - GHSA-5pgx-q9xx-j3qv
     - GHSA-jcw9-v2ff-8m79
     - GHSA-xg75-xf37-cph9
     - GHSA-p45f-gqqj-6qq3
     - GHSA-cwg9-8mc4-hf7j
     - GHSA-5c64-j5m6-8433
     - GHSA-9c46-v3hw-v6m8
     - GHSA-h2j8-4crh-vhfc
     - GHSA-8r3h-vc36-6xpx
     - GHSA-x6pw-mh5w-pq73
     - GHSA-pf5w-m8m6-5265
     - GHSA-f7xp-22ph-v444
     - GHSA-9f75-5fjw-5jvv
   * Cherry-pick upstream fix to properly enforce
     restricted.virtual-machines.lowlevel when creating a VM (thanks to
     Whitelify for identifying the missing fix in trixie)
Checksums-Sha1:
 7fae5c5f626fa7780f092f15ee9066e01ac00e86 5436428 incus-agent-dbgsym_6.0.4-2+deb13u12_i386.deb
 9411475f0d5ff30ea12610ac3833ede6f5f70216 4094952 incus-agent_6.0.4-2+deb13u12_i386.deb
 721414f0fade29b76549297c954a3a6b36fdf2df 17036492 incus-base-dbgsym_6.0.4-2+deb13u12_i386.deb
 74ff1cff3683d74fbae675872cf8bb1317fe8b45 16286532 incus-base_6.0.4-2+deb13u12_i386.deb
 565bafad4c1ce157fb632d679d5fd01b64a14559 5473816 incus-client-dbgsym_6.0.4-2+deb13u12_i386.deb
 abac7038e52bb2b358f842c586675e0160fc42f9 4953768 incus-client_6.0.4-2+deb13u12_i386.deb
 78857a75dda7c7fb04a58c7723cbe37ba1fe34e8 23042852 incus-extra-dbgsym_6.0.4-2+deb13u12_i386.deb
 b47ca8e10ece3c0ac09094fc5d70eb330d38c15a 19021356 incus-extra_6.0.4-2+deb13u12_i386.deb
 fe70b598d7bc2d102bf41449143e6ef6006c2a3e 20153 incus_6.0.4-2+deb13u12_i386-buildd.buildinfo
 58583af1717aba1e9ad2857e6a919c12ca510f12 9776 incus_6.0.4-2+deb13u12_i386.deb
Checksums-Sha256:
 9bf32e2af817f1b8a9564715fb5e3d496672c6a2aaccc030cb15755941726ece 5436428 incus-agent-dbgsym_6.0.4-2+deb13u12_i386.deb
 daf995b4327383962683f02db5d9e87a2c36f450bc6aafc2458c177f3523aee5 4094952 incus-agent_6.0.4-2+deb13u12_i386.deb
 15bea13a1b99d8cd2b41443249b2484dfa95491d175cf98cf6c4d74b16b6d867 17036492 incus-base-dbgsym_6.0.4-2+deb13u12_i386.deb
 fbaaf12c21d2ffd7ef934cf5b41cefc3085fe82c51ec9cb3c612a3e1b9d7a8ce 16286532 incus-base_6.0.4-2+deb13u12_i386.deb
 34dab02577a7bda224cc57789020550ac789f6f4fcead9813e2a31887a3a96b2 5473816 incus-client-dbgsym_6.0.4-2+deb13u12_i386.deb
 8846525d1cd7782c935834c42d38bebac48f1faafaa6711c3845a92380a0f804 4953768 incus-client_6.0.4-2+deb13u12_i386.deb
 0ac3764f0b51eaaf921c854a76b5165ac99ea978e2ff4da4ddebaa7e376a5353 23042852 incus-extra-dbgsym_6.0.4-2+deb13u12_i386.deb
 687165a88b8dfc54b7a9db762a1b639309b24a9f2d71bdccdc75ab0d564afbf9 19021356 incus-extra_6.0.4-2+deb13u12_i386.deb
 96a4b98b6f30e3c2d3859e91359f328eadcaf2f0aca2d36e26d59ab6c588615a 20153 incus_6.0.4-2+deb13u12_i386-buildd.buildinfo
 07344bbc79998504e1d24cdf563a71720bc238e27b2ab850936323ed0c55659a 9776 incus_6.0.4-2+deb13u12_i386.deb
Files:
 a544ce0eefd682a9e340421b90f63c7a 5436428 debug optional incus-agent-dbgsym_6.0.4-2+deb13u12_i386.deb
 55016960b9984770b00cf661af8864e3 4094952 admin optional incus-agent_6.0.4-2+deb13u12_i386.deb
 4f0a8a8b81eb03731e40cc8af0ae4300 17036492 debug optional incus-base-dbgsym_6.0.4-2+deb13u12_i386.deb
 d329628154b6ad0ffb2f98fddbdf22b7 16286532 admin optional incus-base_6.0.4-2+deb13u12_i386.deb
 d16b5b93fba6c2e88b4ea8ba3d12fbf4 5473816 debug optional incus-client-dbgsym_6.0.4-2+deb13u12_i386.deb
 9157ebf4fce08b3e65ec0a64c19d3521 4953768 admin optional incus-client_6.0.4-2+deb13u12_i386.deb
 64f9479cc97989a600471f105cccc3a7 23042852 debug optional incus-extra-dbgsym_6.0.4-2+deb13u12_i386.deb
 5a6ad681e27b8e227c9c524a9b60f42d 19021356 admin optional incus-extra_6.0.4-2+deb13u12_i386.deb
 0b5cc2f37f89957855ae695847bed253 20153 admin optional incus_6.0.4-2+deb13u12_i386-buildd.buildinfo
 aaedf7d98792714e974a134f3433d816 9776 admin optional incus_6.0.4-2+deb13u12_i386.deb

-----BEGIN PGP SIGNATURE-----
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=hREK
-----END PGP SIGNATURE-----