Debian alert DSA-6212-1 (incus)

From:
             
 
Moritz Muehlenhoff <jmm@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6212-1] incus security update
Date:
             
 
Wed, 15 Apr 2026 19:16:03 +0000
Message-ID:
             
 
<ad_j8ypG1CZOUEJm@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6212-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
April 15, 2026                        https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : incus
CVE ID         : CVE-2026-34178 CVE-2026-34179

Two security issues were discovered in Incus, a system container and
virtual machine manager, which could result in restriction bypass
or privilege escalation.

For the stable distribution (trixie), these problems have been fixed in
version 6.0.4-2+deb13u6.

We recommend that you upgrade your incus packages.

For the detailed security status of incus please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/incus

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=YR6J
-----END PGP SIGNATURE-----