-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 25 Jun 2026 00:52:42 +0000
Source: incus
Architecture: source
Version: 7.0.0-4
Distribution: unstable
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
incus (7.0.0-4) unstable; urgency=high
.
* Cherry-pick fixes for the following security issues:
- CVE-2026-48749 / GHSA-2q3f-q5pq-g8wv
- CVE-2026-48750 / GHSA-73hr-m85f-64v9
- CVE-2026-48751 / GHSA-48q5-w887-33wv
- CVE-2026-48752 / GHSA-vxp5-584q-c479
- CVE-2026-48755 / GHSA-v6mj-8pf4-hhw4
- CVE-2026-48769 / GHSA-f6m5-xw2g-xc4x
- CVE-2026-55621 / GHSA-64f3-v33m-w89f
- CVE-2026-55622 / GHSA-c9f5-j9c3-mhrg
* Add patch to fix crash when generating pfx client certificate
Checksums-Sha1:
3764ad32004dbe2d8cdb43cb7214e58ad744db6b 5074 incus_7.0.0-4.dsc
c146af5040ea1b4b87b3155c30ab188d23a71eed 5225255 incus_7.0.0.orig.tar.gz
8769b0f47e5ec839ec54c1c46914f765a62f920f 44600 incus_7.0.0-4.debian.tar.xz
3b98bfadd9ca1c3729506c15e0f4d4029408c17d 27883 incus_7.0.0-4_amd64.buildinfo
Checksums-Sha256:
5299d071472a9a4740f5abf073e6e540af0d9e2bc71b78b283fa34f2a2fde274 5074 incus_7.0.0-4.dsc
8bee6bcb08540f64d86b2379be2e2ce3d7aafc0135ac4602c78e3133d482ddd3 5225255 incus_7.0.0.orig.tar.gz
1e2d09787e4396d202c7dd87119679edd927f0eaa9b0ff3df8c431703d811334 44600 incus_7.0.0-4.debian.tar.xz
91fa8c6c6f556955379c51a6cd5c3ccca738a9796dcd8f28b269cdcac4d6b72d 27883 incus_7.0.0-4_amd64.buildinfo
Files:
3f9946c01afee0e8af9aa66238cf1b0a 5074 admin optional incus_7.0.0-4.dsc
4f080d5ab0bd4c8022dbb796f97f31ff 5225255 admin optional incus_7.0.0.orig.tar.gz
34406b61658f4ea35f5f6ef37187101c 44600 admin optional incus_7.0.0-4.debian.tar.xz
6ab798afd1d9e8dc401a3fc8f40e2fa6 27883 admin optional incus_7.0.0-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmo9p8gSHGdpYm1hdEBk
ZWJpYW4ub3JnAAoJECnu4tbs9EL5E6EP/imWsWWluHf810trccLrWhomn6qkMpH6
G7Kk89ha87LcIdT4ataxrkjkz0T382H48mqX67zRSvcqjt9wOnAlPQJDi4De5b+O
/0EMkbnV0Fjmo/Q15nAm3zZ0h6Tx4QeRB5heGgScjBSY5g9Tp8kgayUXPWsP971l
2OiJwwckkq4Byhw/FJbOYpJYUtN6rAlTRH8d28DGHQyWAxmIa96RVKfCs+Rg0Bfu
2zzd50nquIwtxH+/C5ApnAxIdQizWBxH0/YZw/7REScGhLBnoe1OeZ5Bz6m/FSEE
7dt0j3nZemOTm45pAX5yM9Vp73eVoEcS1R7RZ3kD1PiLDUd4jbacgTX57aDJsXQH
EqFzswrZBJ/6FYdDCg8h5MhTnTVhjr7+6FAW++BLf5GzP9BtdSMiio4HJNg4w7F5
rTySzLn1EeJSlVwDYy/SOOVF4vjQe+aWqj8rWk2k7CuN5k98zOU1MPxK6MsO6Blo
9Vh9aRGr6eWLVohnoyA785P1TTnehChGBuzJKuqv2mbGMvMPrJgmdfPj2QWrCHBF
ks0YlInHtcUYEtQDnSwiFG81F3xYMfRKxSTQDNj623fnhiCMTb99JcaYwNTdtgVN
mHh8V7NbujWPRZ1bxTLJ/0ukRAxFAlFLXfXays0/4YSadazEevsXaq9qs4HuN2BJ
sSWNujDdNpU6
=HlhK
-----END PGP SIGNATURE-----
