-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Jul 2026 22:13:53 +0000
Source: incus
Architecture: source
Version: 7.0.1-2
Distribution: unstable
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
incus (7.0.1-2) unstable; urgency=high
.
[ Marcos Talau ]
* debian/salsa-ci.yml: Add to provide CI tests for Salsa
.
[ Mathias Gibbens ]
* Cherry-pick fixes for the following security issues:
- CVE-2026-62313 / GHSA-53cg-qvg7-m8vg
- CVE-2026-62867 / GHSA-q7xw-r4w2-2wcm
- CVE-2026-62940 / GHSA-qw5c-v953-38gw
- CVE-2026-62941 / GHSA-mq9x-prm8-3vpw
- CVE-2026-63125 / GHSA-6rqx-22hc-qm36
- CVE-2026-63343 / GHSA-fmjx-5j3g-997p
- GHSA-26gp-p5fw-3r2h
- GHSA-4qxq-p5hm-3q3p
- GHSA-67qw-68v3-36h6
- GHSA-6v6x-387m-rj4w
- GHSA-7fj9-65v4-rp7h
- GHSA-m3j6-p3v3-qmjv
- GHSA-p2v3-6wvc-cv3p
* Cherry-pick four additional security fixes not assigned CVEs
Checksums-Sha1:
f94f7e3614d059f242685853fdce007754d22edc 5157 incus_7.0.1-2.dsc
ad8e89e0b4a6dee63255bc2acd906275b0e13b91 5323010 incus_7.0.1.orig.tar.gz
bd319829f33a1a58007cab9f1f9c695ebb9ba2fb 47576 incus_7.0.1-2.debian.tar.xz
e2b50c3b5b9c239b6418033b0cfc45192c4ffe97 27048 incus_7.0.1-2_amd64.buildinfo
Checksums-Sha256:
6d4b1259340f65237742c069a887d0d9755e5a6dffbc34f4659d11d76b4b40ba 5157 incus_7.0.1-2.dsc
69068dd6cd94eb70d3cb007140eb6b3211937ebfd16f6cedb0ee5e5aa073a2dc 5323010 incus_7.0.1.orig.tar.gz
44f8460005c615aa8e034762524575c5ae10b43127a230835f59679bf1715aca 47576 incus_7.0.1-2.debian.tar.xz
c601a827b5baa75e44709b6dc545439e05bd9c46154fe9339aa93d1cce2d7ded 27048 incus_7.0.1-2_amd64.buildinfo
Files:
429825b1d4610f899bcae2ffb8e6e070 5157 admin optional incus_7.0.1-2.dsc
fa667e9a3d8b7a1e8a2246323ef895c6 5323010 admin optional incus_7.0.1.orig.tar.gz
fb5fa0a4990811fdb0bfa4047198f897 47576 admin optional incus_7.0.1-2.debian.tar.xz
a9c6535d5171b9a9510a7a53ab04601e 27048 admin optional incus_7.0.1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmprzosSHGdpYm1hdEBk
ZWJpYW4ub3JnAAoJECnu4tbs9EL5hhgP/A95PSORFunSW+AnID0UO179xEUJzpfn
CBDicpI337WYkvu5p2eLJ0EbvoYpUHSr1joz30Y6PrJuYTUSho41Sw0xOUsfEww/
F9GIeSytMXFPRXTd2qea1DWH1BD3H4X+jr2q1bvB8aux6xzRN7HygJ/ru50YfxDk
AzrBVTsgqWpfPDT2adrbbutqC6Fvw2LW+4wfQlHBN/G60kXXHbSM0059Kl4tzk0a
jR9WJHtnlmLy6m0fgVGXx5cWpiOudeFCcQ8wZsKlciejYSXoCxJVQWnRCUubFKGU
+zQLQHsIoAlAqEpHE8EEoMSQaccJVsy/NyINwczl7l6yX+d5yvWyIQmds4256uUv
2ALkJmtgZDp6KC1kdBML365mpKgafo8ikKiUhg6zFAWUHN1sJe8ywImVhJTj1R+7
qScyUUXP+omhQ0Y6M3B550zXzny4WoWHJORYQiZlAhgk3uFuMSYXZsBKa8EmVO5s
PcqvWcmpgUWtglIP2HsW48xQE/gxQGavvuztCkCE7/74VqD+1z3hq91aPiuErxTZ
DFIOrvvRGjc0NCx5JOGZkRGuiIFjFgQiMkNd+WEfBiu+JF8nUfvi24ux2Ypas+q1
SlCPg6Ac5Aw6ivreKlSzJNh4qfjX3Vx9AOgNkJ4wP/CCfErtLSVCfZ5AIw61PAb1
1Lhzh9OZz3Nf
=Wiqb
-----END PGP SIGNATURE-----
