-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jan 2026 04:06:05 +0000 Source: incus Binary: incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym Architecture: riscv64 Version: 6.0.4-2+deb13u4 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-03) Changed-By: Mathias Gibbens Description: incus - Powerful system container and virtual machine manager - daemon incus-agent - Incus guest agent incus-base - Powerful system container and virtual machine manager - daemon (c incus-client - Powerful system container and virtual machine manager - client incus-extra - Powerful system container and virtual machine manager - extra too Changes: incus (6.0.4-2+deb13u4) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: ac774054f8a2d1cf57b4a2fcc69a7c1f1cbdf8d6 5506856 incus-agent-dbgsym_6.0.4-2+deb13u4_riscv64.deb ffd8d6cf5530eac9867a8063b4ab68cdbe992a7a 3887872 incus-agent_6.0.4-2+deb13u4_riscv64.deb 60050e3b307e66fb47709f3d1da80981df6ff673 17152348 incus-base-dbgsym_6.0.4-2+deb13u4_riscv64.deb 413c1624469c53d69b8f63215383558d2433c78b 15679804 incus-base_6.0.4-2+deb13u4_riscv64.deb 0f9cd3e9f267c8b7c3d78964994b2d7b1a7c63c4 5444400 incus-client-dbgsym_6.0.4-2+deb13u4_riscv64.deb 3515248102329ba9827803bb5c20d36a9f5f4fd7 4740032 incus-client_6.0.4-2+deb13u4_riscv64.deb 1a6d7e56c84c6eea16f2d21ff30896af8aee872f 22712420 incus-extra-dbgsym_6.0.4-2+deb13u4_riscv64.deb 4f46cb11d71fe1e7fdc57f5e23ec5d88f434a464 17976544 incus-extra_6.0.4-2+deb13u4_riscv64.deb 8a5fe73bf487833ea3bb1f59dce099ea2f2d863c 20016 incus_6.0.4-2+deb13u4_riscv64-buildd.buildinfo 206f4c308ea5c4dd5ada3391597c5fc16109cb3a 8608 incus_6.0.4-2+deb13u4_riscv64.deb Checksums-Sha256: bab4f47886e14eea7d95a1d490b24163e30f4cba39c2b4e0e63bcd455951e08f 5506856 incus-agent-dbgsym_6.0.4-2+deb13u4_riscv64.deb a6659359608fefc40c3c8e034519f0c69742061acb17d12e3663d0faaa2333eb 3887872 incus-agent_6.0.4-2+deb13u4_riscv64.deb 7667b00d8374077181951b5d03eda9c0ac58fc81eb56486b0d4372b4fc372751 17152348 incus-base-dbgsym_6.0.4-2+deb13u4_riscv64.deb 785abaf12330c5c1d1cc61b7d622408f7066970dfda704b820029edda44e48c7 15679804 incus-base_6.0.4-2+deb13u4_riscv64.deb 8b454c9aff99385074e2b518fcea4253204152dd39c2a099f27ab51489daf6c9 5444400 incus-client-dbgsym_6.0.4-2+deb13u4_riscv64.deb 867d07fbb50151a8738b60e871966d8da4a84bb78cbe735ab52afaa720b83813 4740032 incus-client_6.0.4-2+deb13u4_riscv64.deb 1b658146fa9c244d6f8b745200f59e10c089ff00b42c569193254362d7869e86 22712420 incus-extra-dbgsym_6.0.4-2+deb13u4_riscv64.deb cbee691178dbbed5f11679b380271fde090e0d801bd72c3e167d1c29e2be964f 17976544 incus-extra_6.0.4-2+deb13u4_riscv64.deb ff5018f0c82da0891e04b1016e79949a6a07bb89091fc0d460e01f0996e3b7c4 20016 incus_6.0.4-2+deb13u4_riscv64-buildd.buildinfo 5e81c63e4512002ac206e26a533ace26359456411e56f87aee9f607e824dec7a 8608 incus_6.0.4-2+deb13u4_riscv64.deb Files: d26022e87ba205c837457a6accccf834 5506856 debug optional incus-agent-dbgsym_6.0.4-2+deb13u4_riscv64.deb 3e7501b9bfaf57bc9caa6de6c2bfaf56 3887872 admin optional incus-agent_6.0.4-2+deb13u4_riscv64.deb 96c4d88866e4d1463cc1b3d6d51f68af 17152348 debug optional incus-base-dbgsym_6.0.4-2+deb13u4_riscv64.deb 59041e99019620603770caea58630144 15679804 admin optional incus-base_6.0.4-2+deb13u4_riscv64.deb 1ae0d4b372cd7d3cb298aa9e23bf5123 5444400 debug optional incus-client-dbgsym_6.0.4-2+deb13u4_riscv64.deb cdb6acc2f94ba00d96a425fe2fa2a435 4740032 admin optional incus-client_6.0.4-2+deb13u4_riscv64.deb d23ab211bdc0242d67e87ada0c7bd747 22712420 debug optional incus-extra-dbgsym_6.0.4-2+deb13u4_riscv64.deb 89a91b4df7e90649ceede1f0a6f263d0 17976544 admin optional incus-extra_6.0.4-2+deb13u4_riscv64.deb 35a7ed2d47e39280200b2b4ae8468498 20016 admin optional incus_6.0.4-2+deb13u4_riscv64-buildd.buildinfo ca197aeaea6785500fb66cc82ea9c61d 8608 admin optional incus_6.0.4-2+deb13u4_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXZ9jHPkg/vETgMJZlJNduPxUf2oFAmlyoxcACgkQlJNduPxU f2pfnA/8Dd2+yaxR17dkBYqBnfftX7NeOArYeObrLvot4Mwb+oQXQgmqsBbBK0mZ UwPfcchT4vQVybpVcU6rjkew+G2UKecDIBn9oT22y6eIugzPXeSGWMCr8i+acgth e3Vws9W/qwFkqY4/grpB91SCw8u/DhGxEdpq58j9t3c6+LFFNFaXDogS6E1kQ9UU E32SuDEazfw/KAux4Nc3HoUrI7KCsWEe7lnHgbozmBMU2j2N3SWVkMvz7XFdV0pf ++eH+oSlh0Dmp9U7BNMKaamBOh90kiUT6MPqrR/Y9bDrq4ztFE/OaSwJtu0BLnb9 dhHkIIdlKtw1uO44rVJBcgFHOpU7ikqCTWAp8Rk9ExaDuOLg++SUw6XMW/e22NW5 7Yd0BCL/zlLTB+Kwd7ifzt+VYU3EG+GBzU0uwp05r3IZ/igBHJaV7qr+DkBfj9VZ FBQsQmA6QWiUVZOXvxtgrV+fEAzcrXszIItgiXboj5TpiaEMTkJnXn47bu1NsIzu SLGcOiyiMcT6ajSkgVqVgJ/FUx6A6Qd1niSBvBULGfWBqDRnIGqGtkMC969ezo3r 3N8wYEs2FKj8AVbnlGlNUkc3eqC8uuCYyg41oV1hB9a2AtIvuf7ID7xHvJTMENcN IdXXySLAvmiV1PlVjYtjfO5Kt7XlLP+JA4wWYxYh+CBMw0U8xHc= =Myee -----END PGP SIGNATURE-----