-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Jan 2026 04:06:05 +0000
Source: incus
Architecture: source
Version: 6.0.4-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
 incus (6.0.4-2+deb13u4) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-23953 / GHSA-x6jc-phwx-hp32
     - CVE-2026-23954 / GHSA-7f67-crqm-jgh7
Checksums-Sha1:
 420cf4208e62f4fb3835c531f4c397c1d5fe6fc7 4618 incus_6.0.4-2+deb13u4.dsc
 798b1f2deb22200c5459705c41512e1fe0a8ee31 4425200 incus_6.0.4.orig.tar.gz
 5c209c86836a460f35687dfffa0a2ed73358cf11 30932 incus_6.0.4-2+deb13u4.debian.tar.xz
 e80fb61919d703ec93980c444cc2a25e1dc4ad3e 20569 incus_6.0.4-2+deb13u4_amd64.buildinfo
Checksums-Sha256:
 2c24209968ec1713a9492d73cb2830738e1b92da60acaeb67a24fdc49b13b672 4618 incus_6.0.4-2+deb13u4.dsc
 3cf6d2602763f6744bf53aad3eb28e6f339b9e08b6a3076d8dd12ed1e780450f 4425200 incus_6.0.4.orig.tar.gz
 d4f002f4f37be673f58b1126b5426676785ad205f4ac499ca8e9779b99d810e8 30932 incus_6.0.4-2+deb13u4.debian.tar.xz
 0bbb329f39a85021435dd4c2f61c54900ee768d0b68de6c5b61559b2cf2d247c 20569 incus_6.0.4-2+deb13u4_amd64.buildinfo
Files:
 016c73023427ab23d29c00e1c4294313 4618 admin optional incus_6.0.4-2+deb13u4.dsc
 cb86c64ce0be2b56050a77c7350fa8f9 4425200 admin optional incus_6.0.4.orig.tar.gz
 ef7be8300c279f1c8ce75131efaf58bf 30932 admin optional incus_6.0.4-2+deb13u4.debian.tar.xz
 21ca689255f23f39c2409ccf0c5bb23c 20569 admin optional incus_6.0.4-2+deb13u4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmlygUISHGdpYm1hdEBk
ZWJpYW4ub3JnAAoJECnu4tbs9EL5phoP+QHIa0wZqbbdNh5+pqNmAEQMxesk3J4U
6WlSqnTsq6ZL5TjpDUuam/sU/kimatKzqPPdQ05gCYqV92WCyQbdqAPKueUyBJge
XusvezOYZWyaKir4dbkZ7i+jirLm84E2LzFGVrWJKvhMNrJZX0PqojouTid2yJOD
ipOoA5HHwmJN38LBzGyjhgU5FC6L6zppJ3SpmK0ihXJXNJyXbElMi1qVFxO0t9OZ
SVhWtX3KANNltE/A3c+zjJy7BT+5cZBpbDzF5xmweOWkE8gGRSRSGD+0MXlmr1Eh
t0Aw8k+AKAgrK8KlbuK66TTGKbiA8q9Sh2vfKfLIQ2UMxlXPaO55ReVSvUaRSsVj
lgoTmoA1A990xRxeNA2SGGdNaL/fgOp5SIqABGDxAYgFtTuxzwEXoe8gNYJxpwZm
NYNnuuA4egRvrYmu7t1tY/Ae0sUFSt82xkMsK6W/tf6pC8IO27s9xnQBTHrDP4Cv
x6HIsdD32Y7INTs/OaZfK8XIub2CEziQvOgQNdBW62wlkbZwwiVOU1PuPEIYEZNZ
W4l3pB7SxX6lz8bcpVsh64BsNsybKzf2ctpaKIzggVw+Qn25h6D14Kzue6Y5yQHw
p1qhPKe8KWfs+socAMJMqO3+SgmcQn3u09s2AcXFhUSPjmqcEUodb/DrdHlE0jyV
acdoxwN7A1tR
=h41k
-----END PGP SIGNATURE-----