-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Oct 2025 15:51:07 +0000 Source: incus Binary: golang-github-lxc-incus-dev incus incus-agent incus-agent-dbgsym incus-base incus-base-dbgsym incus-client incus-client-dbgsym incus-extra incus-extra-dbgsym Architecture: source all amd64 Version: 6.0.4-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Mathias Gibbens <gibmat@debian.org> Description: golang-github-lxc-incus-dev - Powerful system container and virtual machine manager - library incus - Powerful system container and virtual machine manager - daemon incus-agent - Incus guest agent incus-base - Powerful system container and virtual machine manager - daemon (c incus-client - Powerful system container and virtual machine manager - client incus-extra - Powerful system container and virtual machine manager - extra too Changes: incus (6.0.4-2+deb13u1) trixie-security; urgency=high . * Backport fixes for the following security issues: - CVE-2025-54293 / GHSA-472f-vmf2-pr3h - CVE-2025-54287 / GHSA-w2hg-2v4p-vmh6 - CVE-2025-54288 / GHSA-7232-97c6-j525 - CVE-2025-54286 / GHSA-p8hw-rfjg-689h - CVE-2025-54290 / GHSA-p3x5-mvmp-5f35 - CVE-2025-54291 / GHSA-xch9-h8qw-85c7 - CVE-2025-54289 / GHSA-3g72-chj4-2228 Checksums-Sha1: 201387475d73ad37a12826d6c30778abb080a8d5 4618 incus_6.0.4-2+deb13u1.dsc 798b1f2deb22200c5459705c41512e1fe0a8ee31 4425200 incus_6.0.4.orig.tar.gz 699b5abebba62958d0d1b42f70504d5116978b2d 26692 incus_6.0.4-2+deb13u1.debian.tar.xz ff89463e232929f36ca505150c1e2bdaa3a19fc6 1589528 golang-github-lxc-incus-dev_6.0.4-2+deb13u1_all.deb 89e4d38214702bdc51f513fbd12d850cbcab0bc6 5686808 incus-agent-dbgsym_6.0.4-2+deb13u1_amd64.deb d5de2819a0ce12ab63eb51b6629a075461103a58 4408848 incus-agent_6.0.4-2+deb13u1_amd64.deb af75ddd0125147c017b5d43ecce0b15cfdca64d1 17977140 incus-base-dbgsym_6.0.4-2+deb13u1_amd64.deb aaa50c93febfce77012c0ac7d274c60ab6883100 17532352 incus-base_6.0.4-2+deb13u1_amd64.deb 9503b73374ef4799c79bb0967ce6280dbab94a20 5747732 incus-client-dbgsym_6.0.4-2+deb13u1_amd64.deb 84ef020ea1eb3196b54079340d2e5c37e35acca4 5339860 incus-client_6.0.4-2+deb13u1_amd64.deb 1730cc36cd7c95e05005d6bf21d48166e441f1e8 23891360 incus-extra-dbgsym_6.0.4-2+deb13u1_amd64.deb 526fd02deb60e0dc6cbe6629a69644d56b2044b2 20294632 incus-extra_6.0.4-2+deb13u1_amd64.deb 5429d3a9788cbd0aaac2332639a64eb5f9d8d4fe 20501 incus_6.0.4-2+deb13u1_amd64.buildinfo d1145ba5c315c057ca8e689711cc25769283b395 8488 incus_6.0.4-2+deb13u1_amd64.deb Checksums-Sha256: 5aea795596388cfe17fbf7ec298b204bce8fbf7c8312f2800ba2d8fc4b1b6548 4618 incus_6.0.4-2+deb13u1.dsc 3cf6d2602763f6744bf53aad3eb28e6f339b9e08b6a3076d8dd12ed1e780450f 4425200 incus_6.0.4.orig.tar.gz 7198010a6d60fe9395a36af14b5455f2ec0f9780b29e760e521853a02ef48077 26692 incus_6.0.4-2+deb13u1.debian.tar.xz b6ecc09e1f04c7dd6c31d3bd6afc3818fb29eb413ee98e5856ec3d92bbcb21a9 1589528 golang-github-lxc-incus-dev_6.0.4-2+deb13u1_all.deb d141cbe145467e42d44c6b7212b7ddba2ebb10c775ae3df4a65845b96f991eac 5686808 incus-agent-dbgsym_6.0.4-2+deb13u1_amd64.deb 166ee5f261ff8b5a53ef7dd95dfbde3c7cdbd327592e24644f8938ce38d7fb73 4408848 incus-agent_6.0.4-2+deb13u1_amd64.deb cd14ac74104dcbfca4d25465abff68e0d5225bdc204d31ad843391f8905fd687 17977140 incus-base-dbgsym_6.0.4-2+deb13u1_amd64.deb c6ed64ca6c4ee8e9f84d1b30f9a9e43d33620b0278bb10d354f774766bec887f 17532352 incus-base_6.0.4-2+deb13u1_amd64.deb 0cb2c329505d0b1d71a55e6adff097a4c5aec21e3e4532d97fc6d79472258fd6 5747732 incus-client-dbgsym_6.0.4-2+deb13u1_amd64.deb 25ac5161332afa96b4cd4ea1a341afb717934e11cc5472e20b9d4f3cd0a20bca 5339860 incus-client_6.0.4-2+deb13u1_amd64.deb f07058d64695e5723d9682ecb28766767559d62e782485e3f5a4d44879e4d342 23891360 incus-extra-dbgsym_6.0.4-2+deb13u1_amd64.deb d5f57e2300fbc1b7bab88912c41de922958b2b9146b5d6f1c6474177560304e0 20294632 incus-extra_6.0.4-2+deb13u1_amd64.deb b8f0e49a8c84d47421cbcf107a98484afa120509fea949e5a0eeec4b4c7dd9d5 20501 incus_6.0.4-2+deb13u1_amd64.buildinfo 5bbe6580e8ae72e26a9a631c2d26b65e6e57341afefaa9047e204f98a4fcbc38 8488 incus_6.0.4-2+deb13u1_amd64.deb Files: f43ce61877b830e1b4ac56dfd951e394 4618 admin optional incus_6.0.4-2+deb13u1.dsc cb86c64ce0be2b56050a77c7350fa8f9 4425200 admin optional incus_6.0.4.orig.tar.gz 8e304783db29e458876adddd135c4a8b 26692 admin optional incus_6.0.4-2+deb13u1.debian.tar.xz 2cc3d02f40b901a32a13aa198791f778 1589528 golang optional golang-github-lxc-incus-dev_6.0.4-2+deb13u1_all.deb 3d59c530d9299a7558afa1a5662d82b8 5686808 debug optional incus-agent-dbgsym_6.0.4-2+deb13u1_amd64.deb 70367f9d4688fd9811205bbd6b629ce9 4408848 admin optional incus-agent_6.0.4-2+deb13u1_amd64.deb 5e03baf4d240db93dfaa3d657aa3cd75 17977140 debug optional incus-base-dbgsym_6.0.4-2+deb13u1_amd64.deb e186b46bdc5c1f90a4180873254a12fa 17532352 admin optional incus-base_6.0.4-2+deb13u1_amd64.deb a4e11d81d3601efe0287d086b6c65b28 5747732 debug optional incus-client-dbgsym_6.0.4-2+deb13u1_amd64.deb ebc6b647e4a85a033ffb5b372b73eb97 5339860 admin optional incus-client_6.0.4-2+deb13u1_amd64.deb a448a032957872f43f79680728b2705b 23891360 debug optional incus-extra-dbgsym_6.0.4-2+deb13u1_amd64.deb 3b4d0f75612fc6a0d5abdc466bfb6d4f 20294632 admin optional incus-extra_6.0.4-2+deb13u1_amd64.deb ba2c1236f71143fa5716c4935d80ab3f 20501 admin optional incus_6.0.4-2+deb13u1_amd64.buildinfo 00626f0143ec3553f31b4f003ff049a5 8488 admin optional incus_6.0.4-2+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmjqZ3MSHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5Xq0P/0ly8WuRXAvmB9+5+BHmfd1t7DEcF1oH mp6xVu+ldMtudK4Et6CZ1OPTe358+gPhAZEeiseIj3kta+mr0zmzmZOowAuI30Bp qu2qwXkPrEk2HDkKAxuQ/lPpNtzldIjJLQzhnh9LKhWeUVetr2gyqzByKuOemDaW IFDXtt0Jz3QDtlqbemOMr/oXm6EshprWVyGF2ZL6tgyToso4hm/qX9JkXUHVkxIU yYJ/VnlJfeInG0Cynn1ukxA/yRr0xc6MJqKq4kLRRzPjDxG3svdDY43C/sNfA4BM 6z4PUVQqe35YkLI/EYxs7pgcS6LFOM+ZvK9kpKFxyhBO7ve6E+Z7ZuWn0GRU4xtJ 3LAZ0DtvYEImckn33yZECqpsxpJL2DhahV52vzPYmQlmHQQi8me1bXvniqSTxBH9 i+obudd8zBd1elFOroAoLz+4EC9dy+jtrdeFHipNJbmLPk/LnpRWmpEl+WQf8q2e BFrpdU+M9EfTFGva3PUVbwWAPyHhdLES3j9rCu/+cXtAs5htSiXE3R9kBDiXln6/ tCRNHqGGYex652oXxRvNeQpwkqCRB0Akaj3yApi1VLDqR+KpQPcRYcDi9uSi8FBN SBjsS4bNmro2cTIKSsvfvF/3+JajolajBloE2y3KHOoVnwzHoVNILhPsDqXPqVFT Vw46NPULKt37 =rHKK -----END PGP SIGNATURE-----