-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 29 Oct 2026 22:31:36 +0000
Source: incus
Binary: incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym
Architecture: riscv64
Version: 6.0.4-2+deb13u12
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-03) <buildd_riscv64-rv-osuosl-03@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 incus      - Powerful system container and virtual machine manager - daemon
 incus-agent - Incus guest agent
 incus-base - Powerful system container and virtual machine manager - daemon (c
 incus-client - Powerful system container and virtual machine manager - client
 incus-extra - Powerful system container and virtual machine manager - extra too
Changes:
 incus (6.0.4-2+deb13u12) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - GHSA-5pgx-q9xx-j3qv
     - GHSA-jcw9-v2ff-8m79
     - GHSA-xg75-xf37-cph9
     - GHSA-p45f-gqqj-6qq3
     - GHSA-cwg9-8mc4-hf7j
     - GHSA-5c64-j5m6-8433
     - GHSA-9c46-v3hw-v6m8
     - GHSA-h2j8-4crh-vhfc
     - GHSA-8r3h-vc36-6xpx
     - GHSA-x6pw-mh5w-pq73
     - GHSA-pf5w-m8m6-5265
     - GHSA-f7xp-22ph-v444
     - GHSA-9f75-5fjw-5jvv
   * Cherry-pick upstream fix to properly enforce
     restricted.virtual-machines.lowlevel when creating a VM (thanks to
     Whitelify for identifying the missing fix in trixie)
Checksums-Sha1:
 4b629998bd7d178d72c869e4f11beada4bc5cec4 5512600 incus-agent-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 d5809f899f5d97db5f5bc42c3c5c1953c4c71a0f 3890872 incus-agent_6.0.4-2+deb13u12_riscv64.deb
 743880fb8a6a2dcc48c9a51c9f793e46782b9a68 17166000 incus-base-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 6f6d737629854dfca02e0af5a11ee9a23aaa912d 15727600 incus-base_6.0.4-2+deb13u12_riscv64.deb
 b28b14394021bee349f5ce6ae97ca3a6dfd09f0a 5445088 incus-client-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 19ec9e0a297ed39746653325a5b7f9a58f98aa98 4741644 incus-client_6.0.4-2+deb13u12_riscv64.deb
 c524815a39af3dc286a136365745c64a4e1a2fee 22707492 incus-extra-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 7d5ba0fa6aed9d8330ba46fc48f1ad824a9df706 17975320 incus-extra_6.0.4-2+deb13u12_riscv64.deb
 7dbb72892870dbd06ea5946b9a398505d2cbb816 20288 incus_6.0.4-2+deb13u12_riscv64-buildd.buildinfo
 3971a0952ee2854e887247ff455a216d7b3a757c 9784 incus_6.0.4-2+deb13u12_riscv64.deb
Checksums-Sha256:
 c4a228f98b543618e09e2a4c304d001ef5ebc3d2b258005b4a7740a7e384a7b6 5512600 incus-agent-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 c88e8261f5e05fea8f49036710dc791c68ec09cb64316a3e5a727b8a30ee25ff 3890872 incus-agent_6.0.4-2+deb13u12_riscv64.deb
 e0cc10ebdbfbf348d9e7cf01a081f81c168f820036aee6848cf811f999f978a5 17166000 incus-base-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 b60c1fea5aa2d622f74a1c9142e947a5a5e184df1928c40e24a93349de290978 15727600 incus-base_6.0.4-2+deb13u12_riscv64.deb
 13679a672ee045f4fc3c0802ee381c8c03b9f73dfe01280e415ee4da9788c42b 5445088 incus-client-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 38d83a71405b13ce260c8018d23f06af7059856be257371f85960632319ac7d7 4741644 incus-client_6.0.4-2+deb13u12_riscv64.deb
 2039f61772a261597dd7ff06b7aca9eaeb2a29c8cacc4c6a4afb31f7514813cf 22707492 incus-extra-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 c106e0601848f5e0070489178f178fba229507f75c27267d6d86089522623582 17975320 incus-extra_6.0.4-2+deb13u12_riscv64.deb
 4459433aa46ac9132c39a42190687ab09da9863d5dc4b38c1a73fc506c0bf9f2 20288 incus_6.0.4-2+deb13u12_riscv64-buildd.buildinfo
 c546c3c5dffb85919d193d40a85911b6528b2f133f83afe5257117460c73930d 9784 incus_6.0.4-2+deb13u12_riscv64.deb
Files:
 f27416447a5d72cfda5c9f6829849a95 5512600 debug optional incus-agent-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 16171def307657428ba8963c601d7178 3890872 admin optional incus-agent_6.0.4-2+deb13u12_riscv64.deb
 beecb37d6d8a8c28fd0d9687e744e305 17166000 debug optional incus-base-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 6e53b3527cc7b92784cc38cd3497c834 15727600 admin optional incus-base_6.0.4-2+deb13u12_riscv64.deb
 065845dec1da886a061c8e48fb6bdb6a 5445088 debug optional incus-client-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 8f6d04f87ff6aae371b513793ba58e94 4741644 admin optional incus-client_6.0.4-2+deb13u12_riscv64.deb
 bd3545df141f8a9c63b95d3cd0a2d437 22707492 debug optional incus-extra-dbgsym_6.0.4-2+deb13u12_riscv64.deb
 fe11f46c8f81930c2a164649937ea9e4 17975320 admin optional incus-extra_6.0.4-2+deb13u12_riscv64.deb
 a88ae9698d033a0e6b0d8fd39409f45e 20288 admin optional incus_6.0.4-2+deb13u12_riscv64-buildd.buildinfo
 0e63e5ca96638de0d3bb281dabf46839 9784 admin optional incus_6.0.4-2+deb13u12_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=qKDt
-----END PGP SIGNATURE-----