-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Jan 2026 04:06:05 +0000 Source: incus Binary: incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym Architecture: arm64 Version: 6.0.4-2+deb13u4 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Mathias Gibbens Description: incus - Powerful system container and virtual machine manager - daemon incus-agent - Incus guest agent incus-base - Powerful system container and virtual machine manager - daemon (c incus-client - Powerful system container and virtual machine manager - client incus-extra - Powerful system container and virtual machine manager - extra too Changes: incus (6.0.4-2+deb13u4) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: 61ca536cc2e78befdee8ca5f4699e0a2d1b8d5f4 5405260 incus-agent-dbgsym_6.0.4-2+deb13u4_arm64.deb 29ca645d8e38bb3242b856322370504cc0afc8a3 3768388 incus-agent_6.0.4-2+deb13u4_arm64.deb 64358765cd9d5bcd90e04a4e4d42bfe09af9fcee 16871748 incus-base-dbgsym_6.0.4-2+deb13u4_arm64.deb 888e8c411f75176efc5b156d75485310aa77f315 15127368 incus-base_6.0.4-2+deb13u4_arm64.deb b765499a01a7625d60fdb79e78fc39fc1936cac9 5371700 incus-client-dbgsym_6.0.4-2+deb13u4_arm64.deb e39455f99aee153b50b24fc8cd7f6ed8f7322868 4570748 incus-client_6.0.4-2+deb13u4_arm64.deb 3bb3f995d47f1ae2b66e6b107aa17e4d6a45a85a 22377640 incus-extra-dbgsym_6.0.4-2+deb13u4_arm64.deb 4de0222dbdb7b67f6d46b39c15fe9795963fd158 17399088 incus-extra_6.0.4-2+deb13u4_arm64.deb 0d7ac7a55f6e1dceac4e811ca8fba5d9d6612b16 20063 incus_6.0.4-2+deb13u4_arm64-buildd.buildinfo aaf7b9f95c4651efafe0d6d83aa7eabe3fca37af 8616 incus_6.0.4-2+deb13u4_arm64.deb Checksums-Sha256: 8a35165d6935efa863b5c855e493119a65a8fd0bc4e556b4717b6018d34e3ce6 5405260 incus-agent-dbgsym_6.0.4-2+deb13u4_arm64.deb 6b995ea3be625167880a9a2997296c9af016aadae2cd0d9e27530fb8d82f866d 3768388 incus-agent_6.0.4-2+deb13u4_arm64.deb 9a5bab5416e01bc6d47e952a1d2cb335debc5cfce88404162a57fd4cc0695a21 16871748 incus-base-dbgsym_6.0.4-2+deb13u4_arm64.deb 37951d60aeda5054919c18b2eae02cc2bf1719445db3b9826277bf42f89505b6 15127368 incus-base_6.0.4-2+deb13u4_arm64.deb 982948c1384a15d6907b4a2a2f013f99f493b9f083225b38cc6c8b4f1063916c 5371700 incus-client-dbgsym_6.0.4-2+deb13u4_arm64.deb b6b99dc8152c4e106d608d3e064412ce2c4ca999aa1046edfe8485eaa1fd1e1a 4570748 incus-client_6.0.4-2+deb13u4_arm64.deb c349f3c5de80db72cdceb0232ad78fe0b56852f0c8aba1c86763bc67976898f8 22377640 incus-extra-dbgsym_6.0.4-2+deb13u4_arm64.deb 3aa283673140ca44c7228437d0df0c50afe841c94d52d677c60773e0cab61d2e 17399088 incus-extra_6.0.4-2+deb13u4_arm64.deb 0a4cb0624bd29880612a9f9217b6e7f93225c26d53859fc6ece1b7a398180087 20063 incus_6.0.4-2+deb13u4_arm64-buildd.buildinfo 5b0be736941b367fa2276b0f394c97ab083f69a2b7f5a94fe4645e5072222b52 8616 incus_6.0.4-2+deb13u4_arm64.deb Files: 10ec0fee8c209d0a4b36ec422d7004c1 5405260 debug optional incus-agent-dbgsym_6.0.4-2+deb13u4_arm64.deb ae9dd1c07c65c136f2e4868eb525b279 3768388 admin optional incus-agent_6.0.4-2+deb13u4_arm64.deb b701c5e48cf05715b76b2e7c0c9db26a 16871748 debug optional incus-base-dbgsym_6.0.4-2+deb13u4_arm64.deb c1c0937641199b62489cf2ca46b10021 15127368 admin optional incus-base_6.0.4-2+deb13u4_arm64.deb 757251e6ac0ce659fbfaa36f28e0ef04 5371700 debug optional incus-client-dbgsym_6.0.4-2+deb13u4_arm64.deb 457726555fe3d7b92a1255824f5eec8f 4570748 admin optional incus-client_6.0.4-2+deb13u4_arm64.deb ecb0ce7950019ea391470c98b88437fe 22377640 debug optional incus-extra-dbgsym_6.0.4-2+deb13u4_arm64.deb d506e47614574c52472c99de7f3513dc 17399088 admin optional incus-extra_6.0.4-2+deb13u4_arm64.deb 6441e8b8524155d190cccaa08850fb2f 20063 admin optional incus_6.0.4-2+deb13u4_arm64-buildd.buildinfo 232926b729a8c0d2f367022a79d7938c 8616 admin optional incus_6.0.4-2+deb13u4_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmlyhtQACgkQXVp1sEH/ 1mIPFw//RAa4UdldfizQPpmwiSCMxJmXXd/CHBm/6HzJw3kVK53q4Bp4MAxDckra vugUnRHZXHUzv56lMTwoUso+HyjwbG1FFfZF4zArO7PFWfQ1YlmYb+lTXyJewUCK AU9h4p1eGgyVPQQ8OZGLYaD2VaSXlEf3PbxS81Z6IZ+yYHc/kL8UrxLhUqaDxKMX Ht+DuJhZCizsUI4Zp+lC40tvVgCl9FCX+DS8IU21eomBvjbfK5+uX0U9FMFgD5ag i0PnjIEwSzDf03GmOXsv8mq9yxZmMi+HzNpSvU64N+OPQu/FoHkWXzcAAqgerc5k fDIznJJWaaaBvYOA4C4/8bWZf9RyupgHJDk0ny8DY1uMQjhEF7v9PZYn6DjWpoGa YV2C4rU6XFTdbELOmc/XEiABAMdgpfMyeLOu3JqLTCqgioDPUpJP+YUMA8BgbYXV uiZ1TMfsvI4ltIRaO63rcT6y6dgs7EtXOlKj6kBnFAlrVfXr17EyjGj2MRYjDewq edEeyuic35cvKEuHGgvpSU5nnso+ypEH4awOgjNHNGr0Cyx94ZheNIK6IIdTxSFj tM/FLbDHMW8uF1pJH+hnoaqHKtRfxzXGW9186hLFnOTEjr3LgvpWV0blnxuOCrIG 7p4+BZTsst7D9M5SEI5KcpBfUTYSwV2x+EfSx5OrgkJDNuhOgf8= =r3w+ -----END PGP SIGNATURE-----