[DSA 6370-1] incus security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6370-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
June 26, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : incus
CVE ID         : CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 
                 CVE-2026-48755 CVE-2026-48756 CVE-2026-48769 CVE-2026-55621 
                 CVE-2026-55622

Multiple security issues were discovered in Incus, a system container
and virtual machine manager, which could result in a bypass of security
restrictions or the execution of arbitrary commands.

For the stable distribution (trixie), these problems have been fixed in
version 6.0.4-2+deb13u8.

We recommend that you upgrade your incus packages.

For the detailed security status of incus please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/incus

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=CTbW
-----END PGP SIGNATURE-----