-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 30 Jul 2026 22:57:51 +0000
Source: incus
Binary: golang-github-lxc-incus-dev
Architecture: all
Version: 6.0.4-2+deb13u9
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 golang-github-lxc-incus-dev - Powerful system container and virtual machine manager - library
Changes:
 incus (6.0.4-2+deb13u9) trixie-security; urgency=high
 .
   * Cherry-pick upstream fix for large nft ruleset performance
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-62313 / GHSA-53cg-qvg7-m8vg
     - CVE-2026-62867 / GHSA-q7xw-r4w2-2wcm
     - CVE-2026-62940 / GHSA-qw5c-v953-38gw
     - CVE-2026-62941 / GHSA-mq9x-prm8-3vpw
     - CVE-2026-63125 / GHSA-6rqx-22hc-qm36
     - CVE-2026-63343 / GHSA-fmjx-5j3g-997p
     - GHSA-26gp-p5fw-3r2h
     - GHSA-4qxq-p5hm-3q3p
     - GHSA-67qw-68v3-36h6
     - GHSA-m3j6-p3v3-qmjv
     - GHSA-p2v3-6wvc-cv3p
   * Cherry-pick four additional security fixes not assigned CVEs
Checksums-Sha1:
 c2f531a7555a7cf92b3ea18e035fe38468442e7d 1593376 golang-github-lxc-incus-dev_6.0.4-2+deb13u9_all.deb
 5530438fe709c911327d81b8ecb468f000c05931 17751 incus_6.0.4-2+deb13u9_all-buildd.buildinfo
Checksums-Sha256:
 3211000303cc68813810d456b0fb57655ed62d7bb248ad49306a329cd2891548 1593376 golang-github-lxc-incus-dev_6.0.4-2+deb13u9_all.deb
 2e9c415294f61f069528117c59a5b5cd3d0a514d5b147ca3456a47550fa3d3b7 17751 incus_6.0.4-2+deb13u9_all-buildd.buildinfo
Files:
 1e18f12be1ec74ee5cc4db420f174233 1593376 golang optional golang-github-lxc-incus-dev_6.0.4-2+deb13u9_all.deb
 02c3bf6a03cd41b05cfdcb7a6d4674c0 17751 admin optional incus_6.0.4-2+deb13u9_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=BjNL
-----END PGP SIGNATURE-----