-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 01 May 2026 01:13:25 +0000
Source: incus
Binary: golang-github-lxc-incus-dev
Architecture: all
Version: 6.0.4-2+deb13u7
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 golang-github-lxc-incus-dev - Powerful system container and virtual machine manager - library
Changes:
 incus (6.0.4-2+deb13u7) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-40195 / GHSA-gc7j-g665-rxr9
     - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9
     - CVE-2026-40243 / GHSA-c839-4qxr-j4x3
     - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6
     - CVE-2026-41647 / GHSA-fwj8-62r8-8p8m
     - CVE-2026-41648 / GHSA-67wx-r9xr-x75x
     - CVE-2026-41684 / GHSA-x5r6-jr56-89pv
     - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp
Checksums-Sha1:
 6a522891e0a05f8cc23a552743168ee4579c33dc 1591480 golang-github-lxc-incus-dev_6.0.4-2+deb13u7_all.deb
 444144aa0757c2f0ba1463cb7d1f452197c90264 17659 incus_6.0.4-2+deb13u7_all-buildd.buildinfo
Checksums-Sha256:
 81745a8b1daba478f262ba9da645588d7ec7d49cd303a376c16a00a0d82b2545 1591480 golang-github-lxc-incus-dev_6.0.4-2+deb13u7_all.deb
 85e788e411f377c33193dd4d664aae31150ffc71e6c426b063fa10984e2671e1 17659 incus_6.0.4-2+deb13u7_all-buildd.buildinfo
Files:
 162e740aaa6133652159c795233e957d 1591480 golang optional golang-github-lxc-incus-dev_6.0.4-2+deb13u7_all.deb
 bd451572880c7746fab200318aa5b5f7 17659 admin optional incus_6.0.4-2+deb13u7_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=n9bN
-----END PGP SIGNATURE-----