-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2026 14:31:18 +0000
Source: incus
Architecture: source
Version: 6.0.4-2+deb13u11
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
 incus (6.0.4-2+deb13u11) trixie-security; urgency=high
 .
   * Cherry-pick fix for only transferring xattrs settable without
     CAP_SYS_ADMIN
   * Cherry-pick fixes for the following security issues:
     - GHSA-4cph-ccqv-hm3c
     - GHSA-579w-c4rw-c8q3
     - GHSA-x8gj-2q73-qr6j
     - GHSA-jh4v-j34r-2mgh
     - GHSA-mfwv-x733-9446
     - GHSA-h85r-gjgx-g2rv
     - GHSA-27q7-qwhm-c34p
Checksums-Sha1:
 8382ca6a23083e024f570d19d9530e73132a88bc 4622 incus_6.0.4-2+deb13u11.dsc
 798b1f2deb22200c5459705c41512e1fe0a8ee31 4425200 incus_6.0.4.orig.tar.gz
 f601750fd5e3b866d82b14cf7508a087deba6770 59924 incus_6.0.4-2+deb13u11.debian.tar.xz
 cb6f5d25a1962cd4a65933998978ae2133ab6b67 20847 incus_6.0.4-2+deb13u11_amd64.buildinfo
Checksums-Sha256:
 2b2f1947f5f02274103389ab1dfbb7ea5dfaad206c34ec7174e9ffa7cba244f9 4622 incus_6.0.4-2+deb13u11.dsc
 3cf6d2602763f6744bf53aad3eb28e6f339b9e08b6a3076d8dd12ed1e780450f 4425200 incus_6.0.4.orig.tar.gz
 c916962fb5ff7d4478c026910db9cca3aa8636cea147883128d9b975cc7d4841 59924 incus_6.0.4-2+deb13u11.debian.tar.xz
 b5e4d961cd934e2d4c910fa61c06af67b0010122b6ab682720f305033b0492c3 20847 incus_6.0.4-2+deb13u11_amd64.buildinfo
Files:
 a217b3055042709a728a45b8f2c1ead5 4622 admin optional incus_6.0.4-2+deb13u11.dsc
 cb86c64ce0be2b56050a77c7350fa8f9 4425200 admin optional incus_6.0.4.orig.tar.gz
 28764cb7b74869dc9948351dcc1f8380 59924 admin optional incus_6.0.4-2+deb13u11.debian.tar.xz
 a5de29bff26c6b77d9670ae5a910c063 20847 admin optional incus_6.0.4-2+deb13u11_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=xvQu
-----END PGP SIGNATURE-----