-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Oct 2026 22:31:36 +0000 Source: incus Architecture: source Version: 6.0.4-2+deb13u12 Distribution: trixie-security Urgency: high Maintainer: Debian Go Packaging Team Changed-By: Mathias Gibbens Changes: incus (6.0.4-2+deb13u12) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - GHSA-5pgx-q9xx-j3qv - GHSA-jcw9-v2ff-8m79 - GHSA-xg75-xf37-cph9 - GHSA-p45f-gqqj-6qq3 - GHSA-cwg9-8mc4-hf7j - GHSA-5c64-j5m6-8433 - GHSA-9c46-v3hw-v6m8 - GHSA-h2j8-4crh-vhfc - GHSA-8r3h-vc36-6xpx - GHSA-x6pw-mh5w-pq73 - GHSA-pf5w-m8m6-5265 - GHSA-f7xp-22ph-v444 - GHSA-9f75-5fjw-5jvv * Cherry-pick upstream fix to properly enforce restricted.virtual-machines.lowlevel when creating a VM (thanks to Whitelify for identifying the missing fix in trixie) Checksums-Sha1: 6e495ba1f329ec9468dd25c325bbb5474000f4a3 4622 incus_6.0.4-2+deb13u12.dsc 798b1f2deb22200c5459705c41512e1fe0a8ee31 4425200 incus_6.0.4.orig.tar.gz 5022f9e355a773febe949663d21dba14efaa6327 72088 incus_6.0.4-2+deb13u12.debian.tar.xz 80293f3f122d7988c4469241bceccbacdaa7bf91 20847 incus_6.0.4-2+deb13u12_amd64.buildinfo Checksums-Sha256: 2b82cb3629d85a4f6aecbb03ce07acb7a0082f4f81ffb7bf8b339ba2cc9a62e6 4622 incus_6.0.4-2+deb13u12.dsc 3cf6d2602763f6744bf53aad3eb28e6f339b9e08b6a3076d8dd12ed1e780450f 4425200 incus_6.0.4.orig.tar.gz 0f09dadda360d162294650eb2a938a8eb7179950e1ed649c7d9792cfe667d3e8 72088 incus_6.0.4-2+deb13u12.debian.tar.xz 5c1e2cbd3a92f602bb25242904b35d3b6eb3df9a6768c24d03a63a234cdf8b8f 20847 incus_6.0.4-2+deb13u12_amd64.buildinfo Files: dd818032386bd88876e4e382f7b0bc32 4622 admin optional incus_6.0.4-2+deb13u12.dsc cb86c64ce0be2b56050a77c7350fa8f9 4425200 admin optional incus_6.0.4.orig.tar.gz 20db3aa683e2e4b854f53b5668ab0ed5 72088 admin optional incus_6.0.4-2+deb13u12.debian.tar.xz e87f8c06530dcb91409c78b6fc112792 20847 admin optional incus_6.0.4-2+deb13u12_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmrno2kSHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5cJAP/iEmxWcSBpAzGedn72o1uKR0AWLdp3z+ kXSk5aa6LAqgoLhPExXNfBX5dw38vfdsJ5lGAMRxB+3TQ6mgqmg5kcfHJfCeu+pz mLrfcAm2qFF7UD6D/DLjEbYvBvzBV6BMiMZ/Xp8kms2zSCLWTROcWGjv4f2WcU3y HdR1sx87M35h9M8nO+iD/vTQpzU915BTJ5uRWqq2VW27Tp5QV77g51tEQJHRgHgF DvAm6eFoLQuKJIIvkOVIlV9mlj8l0RA0MZ3nxYAYVCPk2LvOwQBqSmBkE+r3jGCs 2MMN8WxE86SElub8RBo92IA/P9yWgA/G7ubZ45mljvAo58/1L6oc1fDxyg1e0wr4 sVg9VQLfk2X2MdfRatCXlHuT7Il62rMJCpSJiEb7FWzIJAaxP+PH5MFdcNT0iwX5 c4cSgUfrlXUgrVAj5oYyq4gF4xAGsNzh6fysuE8puVwGjQakLykN2eC9DwjU4WK0 hGzJgfHZoMkt1W4ebjqw25xAHIa3WKTqjdJ16Y1+jlwMZsBqo+CwxN9DZl0TvXHb wkeTb1dJjtMr1hufaHs1eJIClPUrrIxyjh0A8pbDo1iPUh2QgNXa4JtxGlumA63D NEv45Fi2hNH4Sv4pSVfaueEzSgd9787GzH2lhtlji5mtlupIzvfHbbq9hh2WGemj YIzNARQ+hZkM =99d8 -----END PGP SIGNATURE-----