-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jan 2026 04:06:05 +0000 Source: incus Binary: incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym Architecture: amd64 Version: 6.0.4-2+deb13u4 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Mathias Gibbens Description: incus - Powerful system container and virtual machine manager - daemon incus-agent - Incus guest agent incus-base - Powerful system container and virtual machine manager - daemon (c incus-client - Powerful system container and virtual machine manager - client incus-extra - Powerful system container and virtual machine manager - extra too Changes: incus (6.0.4-2+deb13u4) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: 722159f1571f498c70e1c2c26fb3beb3b07fe21e 5686444 incus-agent-dbgsym_6.0.4-2+deb13u4_amd64.deb 875b9d1d17878a6e0d892046cea7ea44b82127dc 4409000 incus-agent_6.0.4-2+deb13u4_amd64.deb 5afe2061c2e4ed1ab01397eca33b13105d5099c4 17979808 incus-base-dbgsym_6.0.4-2+deb13u4_amd64.deb f495bca5f9b094ed35cfd52be81b78e6aaa0f860 17524048 incus-base_6.0.4-2+deb13u4_amd64.deb cc262b232913a2b2adb3e11f80c4690cac31122f 5747956 incus-client-dbgsym_6.0.4-2+deb13u4_amd64.deb 9d4e7cd88fd2ddb0c892142c3b7c81e0ed80a20f 5340104 incus-client_6.0.4-2+deb13u4_amd64.deb 0f740bccfb908492394b51afb452f358b2d1d0f4 23891404 incus-extra-dbgsym_6.0.4-2+deb13u4_amd64.deb 29720dc260f8868cb9a68ff44fde65276eb0c79c 20294272 incus-extra_6.0.4-2+deb13u4_amd64.deb 5be2bdd4e7a4c9c2f78989c071b620a1e5373b59 20001 incus_6.0.4-2+deb13u4_amd64-buildd.buildinfo 58a9f0ce8017f2f78dc82f18f93263facd5d13f9 8620 incus_6.0.4-2+deb13u4_amd64.deb Checksums-Sha256: e9e672d722687695734d49f729129dc49f33064205d7b556ad62eacd80647f8f 5686444 incus-agent-dbgsym_6.0.4-2+deb13u4_amd64.deb 59e28f0b260b3a94928aca8c430ace6bc33d91f9c290470c4d1759f0067b92cd 4409000 incus-agent_6.0.4-2+deb13u4_amd64.deb 3685532819d9121f1de43fca16843427fdfae80d5e4a1b881e5e6d2c1a84e22c 17979808 incus-base-dbgsym_6.0.4-2+deb13u4_amd64.deb 540d8b5d278891fc546577bfe2ae51e7a2d2b11e7752a75979aa0711df54b928 17524048 incus-base_6.0.4-2+deb13u4_amd64.deb f62b1c3d33ab6ea35b1d37ec51178837050293af038df119277fbbee76c01041 5747956 incus-client-dbgsym_6.0.4-2+deb13u4_amd64.deb 67b261d7052d15f091b82b62631cf9fe53d47ba960c33989c252cf45e8e2f2e5 5340104 incus-client_6.0.4-2+deb13u4_amd64.deb 7bc2aca4490fca9d779be46fccb408f5e422632457f1d5023932daefaab3d44e 23891404 incus-extra-dbgsym_6.0.4-2+deb13u4_amd64.deb 905ec7ee22980b01eeb775a0cd9a710053f15884ec21556793e986ecc0fb2d98 20294272 incus-extra_6.0.4-2+deb13u4_amd64.deb 9bd25d5da2eaec3abe967b96bfb5010ca91255bd7408ea1bcf7cb84ce8252702 20001 incus_6.0.4-2+deb13u4_amd64-buildd.buildinfo 108e81d9ad1460ca1c1415ecbe16afea449c653dbb72371b3c20457fa1cd72a7 8620 incus_6.0.4-2+deb13u4_amd64.deb Files: 14c47f075018c0b1204bb25d64c3d8bb 5686444 debug optional incus-agent-dbgsym_6.0.4-2+deb13u4_amd64.deb dcb4d7a7e02e6cecd77926aae9e90e6c 4409000 admin optional incus-agent_6.0.4-2+deb13u4_amd64.deb acd75b1abf886e959d223afb8fddbde2 17979808 debug optional incus-base-dbgsym_6.0.4-2+deb13u4_amd64.deb 7a44934e297e51ad9bf4ad2833d91fff 17524048 admin optional incus-base_6.0.4-2+deb13u4_amd64.deb 2ece553b84086d9244bf2ae5e6e7d705 5747956 debug optional incus-client-dbgsym_6.0.4-2+deb13u4_amd64.deb 2eae515c7970e063b62e761dce88a8d4 5340104 admin optional incus-client_6.0.4-2+deb13u4_amd64.deb 890d6fd2a5e65130f1cc164e1edf72e5 23891404 debug optional incus-extra-dbgsym_6.0.4-2+deb13u4_amd64.deb 7bcc0b4429bcd11ac3dd9fa3303f0cfd 20294272 admin optional incus-extra_6.0.4-2+deb13u4_amd64.deb e180090e17357829c4524b056ee0f702 20001 admin optional incus_6.0.4-2+deb13u4_amd64-buildd.buildinfo 85ab7f03badb582813642b012bf73793 8620 admin optional incus_6.0.4-2+deb13u4_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmlyhwkACgkQEbCLukZn 24rm2BAAoS3ufsvVfjG/Gf5V2yEaEQ5rT27q4qufGy6VmIrssrITaq7XCUvBLNnt ByWkoHP8wI3eDbmjGW1kf368wlOOPL8JS3fsfXES3RI8YSr45/BalJ76fZj6Fi07 YzGrAjKevWF4rFjKy48vZ49629vFP0s1jtcwZtAmpzXI22X12q7jUsdw4zNio5y+ Grmtn0x2p3dXZi0dE+AKO4vLD4/jCWECATYr4LxtXuHz8yJNMvctoNMGtoFdB6Jw xJ0DXddtl/cLDOsc7S1tcEHaka2+1SSYbpWt+yGEGwVs56wEoORgmc8Ob+DXDVHD ESLmxxtkg4J9HvoGAxnqHIwQ95pVmuDXvHG8cFGi6wznGoZnwlPlXEHoHPy3ZJTZ j46r4C57gf3QMj8zeaD3tVCJn2fpl6ErsVUNaqZTYY8b15cAw6kH/B3uU4mjsGc/ rPmqDxr8rrScRaofIy/Sj+XWqmHu0P2gL9CNQpgORk7K3t7vvII19CJZNIEFaLHn DH462O925H+M8Lxb21IoATS/EBKV89GCCgwrm5Ex95L/Lf1WE1aPkzWSQELU2uLg tC7Cbs9VGxDMF+Xu6tVk0bAkiFSxVIHgluLK3oeOBP1idfv3IDjCmYGk+8hHPraC sbZy+VBsnYXOCQiU+8Er9Wvs2KhQMrFyjF5I+MXTENEZThUvfF0= =BZI8 -----END PGP SIGNATURE-----