-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 22:18:57 +0000
Source: incus
Architecture: source
Version: 6.0.4-2+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
 incus (6.0.4-2+deb13u5) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
     - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
     - CVE-2026-33743 / GHSA-vg76-xmhg-j5x3
     - CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
 b379e9412336789a5264561cf1bebb8ecb25ff9a 4618 incus_6.0.4-2+deb13u5.dsc
 798b1f2deb22200c5459705c41512e1fe0a8ee31 4425200 incus_6.0.4.orig.tar.gz
 61158e1563839b8dab303ed33915d6a6b2ba41b0 35764 incus_6.0.4-2+deb13u5.debian.tar.xz
 113164924d058df7f864dafcc77ce18b11ad8c00 20598 incus_6.0.4-2+deb13u5_amd64.buildinfo
Checksums-Sha256:
 88235f0813eb9f9948c1a1e43580633a05e459b443649e0db7ee8bed58ebb530 4618 incus_6.0.4-2+deb13u5.dsc
 3cf6d2602763f6744bf53aad3eb28e6f339b9e08b6a3076d8dd12ed1e780450f 4425200 incus_6.0.4.orig.tar.gz
 56b50e2d7250e4ee1bf7a5906b05f642a27f95bfe1acf17740617b379e190bb7 35764 incus_6.0.4-2+deb13u5.debian.tar.xz
 e61a718df58a973c6c94a991083bf26ef3323ccf84139392edffd3c5d9a6381e 20598 incus_6.0.4-2+deb13u5_amd64.buildinfo
Files:
 3fda4bb89b7b02c2bb4e21fa12d9d2c4 4618 admin optional incus_6.0.4-2+deb13u5.dsc
 cb86c64ce0be2b56050a77c7350fa8f9 4425200 admin optional incus_6.0.4.orig.tar.gz
 c7f6400339d23bdb3a2a626a711e9ced 35764 admin optional incus_6.0.4-2+deb13u5.debian.tar.xz
 f540016186364fbb5f225b7228dfc7a3 20598 admin optional incus_6.0.4-2+deb13u5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=nFq7
-----END PGP SIGNATURE-----