incus (6.0.4-2+deb13u10) trixie; urgency=medium

  * Cherry-pick fixes for the following security issues
    - CVE-2026-81500 / GHSA-9pqw-c7m4-xvg7
    - CVE-2026-81501 / GHSA-c6wx-8679-hpr9

 -- Mathias Gibbens <gibmat@debian.org>  Wed, 02 Sep 2026 16:39:29 +0000

incus (6.0.4-2+deb13u9) trixie-security; urgency=high

  * Cherry-pick upstream fix for large nft ruleset performance
  * Cherry-pick fixes for the following security issues:
    - CVE-2026-62313 / GHSA-53cg-qvg7-m8vg
    - CVE-2026-62867 / GHSA-q7xw-r4w2-2wcm
    - CVE-2026-62940 / GHSA-qw5c-v953-38gw
    - CVE-2026-62941 / GHSA-mq9x-prm8-3vpw
    - CVE-2026-63125 / GHSA-6rqx-22hc-qm36
    - CVE-2026-63343 / GHSA-fmjx-5j3g-997p
    - CVE-2026-81493 / GHSA-p2v3-6wvc-cv3p
    - CVE-2026-81495 / GHSA-67qw-68v3-36h6
    - CVE-2026-81496 / GHSA-26gp-p5fw-3r2h
    - CVE-2026-81497 / GHSA-4qxq-p5hm-3q3p
    - CVE-2026-81498 / GHSA-m3j6-p3v3-qmjv
  * Cherry-pick four additional security fixes not assigned CVEs

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 30 Jul 2026 22:57:51 +0000

incus (6.0.4-2+deb13u8) trixie-security; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-48749 / GHSA-2q3f-q5pq-g8wv
    - CVE-2026-48750 / GHSA-73hr-m85f-64v9
    - CVE-2026-48751 / GHSA-48q5-w887-33wv
    - CVE-2026-48752 / GHSA-vxp5-584q-c479
    - CVE-2026-48755 / GHSA-v6mj-8pf4-hhw4
    - CVE-2026-48756 / GHSA-xhqx-mgh3-3h7q
    - CVE-2026-48769 / GHSA-f6m5-xw2g-xc4x
    - CVE-2026-55621 / GHSA-64f3-v33m-w89f
    - CVE-2026-55622 / GHSA-c9f5-j9c3-mhrg

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 25 Jun 2026 00:53:11 +0000

incus (6.0.4-2+deb13u7) trixie-security; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-40195 / GHSA-gc7j-g665-rxr9
    - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9
    - CVE-2026-40243 / GHSA-c839-4qxr-j4x3
    - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6
    - CVE-2026-41647 / GHSA-fwj8-62r8-8p8m
    - CVE-2026-41648 / GHSA-67wx-r9xr-x75x
    - CVE-2026-41684 / GHSA-x5r6-jr56-89pv
    - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 01 May 2026 01:13:25 +0000

incus (6.0.4-2+deb13u6) trixie-security; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-34178 / GHSA-q96j-3fmm-7fv4
    - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5

 -- Mathias Gibbens <gibmat@debian.org>  Tue, 14 Apr 2026 16:44:29 +0000

incus (6.0.4-2+deb13u5) trixie-security; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
    - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
    - CVE-2026-33743 / GHSA-vg76-xmhg-j5x3
    - CVE-2026-33897 / GHSA-83xr-5xxr-mh92

 -- Mathias Gibbens <gibmat@debian.org>  Tue, 24 Mar 2026 22:18:57 +0000

incus (6.0.4-2+deb13u4) trixie-security; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-23953 / GHSA-x6jc-phwx-hp32
    - CVE-2026-23954 / GHSA-7f67-crqm-jgh7

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 22 Jan 2026 04:06:05 +0000

incus (6.0.4-2+deb13u3) trixie; urgency=medium

  * Backport fix for running nested docker in containers (Closes: #1121011)

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 22 Nov 2025 15:21:53 +0000

incus (6.0.4-2+deb13u2) trixie-security; urgency=high

  * Backport upstream fix for CVE-2025-64507 / GHSA-56mx-8g9f-5crf

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 10 Nov 2025 13:32:56 +0000

incus (6.0.4-2+deb13u1) trixie-security; urgency=high

  * Backport fixes for the following security issues:
    - CVE-2025-54293 / GHSA-472f-vmf2-pr3h
    - CVE-2025-54287 / GHSA-w2hg-2v4p-vmh6
    - CVE-2025-54288 / GHSA-7232-97c6-j525
    - CVE-2025-54286 / GHSA-p8hw-rfjg-689h
    - CVE-2025-54290 / GHSA-p3x5-mvmp-5f35
    - CVE-2025-54291 / GHSA-xch9-h8qw-85c7
    - CVE-2025-54289 / GHSA-3g72-chj4-2228

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 02 Oct 2025 15:51:07 +0000

incus (6.0.4-2) unstable; urgency=medium

  * Fix inadvertent policy violation where build created files in HOME
    (Closes: #1103554)
  * Cherry-pick upstream fixes:
    - Cleanup old qemu sockets
    - Retry agent mounts
    - USB hotplugging
  * d/control:
    - Add back Build-Using stanzas
    - Add squashfs-tools-ng to incus-base Required packages
    - Have incus-client Suggest "spice-client-gtk | virt-viewer"
  * Update systemd service to wait long enough for Incus to correctly shutdown
  * Update systemd and sysv init scripts to use `incusd waitready`

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 27 Apr 2025 14:45:33 +0000

incus (6.0.4-1) unstable; urgency=medium

  * New upstream release
    - Rebase patches and drop upstream cherry-picked commits
  * d/control:
    - Update Build-Depends and Depends
    - Add lego to list of Suggested packages for incus-base

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 04 Apr 2025 02:43:07 +0000

incus (6.0.3-5) unstable; urgency=medium

  [ Martin Steigerwald ]
  * Runit support for Incus (Closes: #1084990)

  [ Mathias Gibbens ]
  * d/control:
    - Apply hack for /usr-move (Closes: #1099444; DEP17 P1 M7)
    - Update minimum required version of lxcfs to ensure its runit scripts
      will be available
    - Set minimum version of apparmor
    - Replace Built-Using with Static-Built-Using
  * Add apparmor 4.x userns patch
  * Cherry-pick upstream commit for selecting SecureBoot capable OVMF
  * Cherry-pick upstream fix for qemu 10
  * Update d/README.Debian to reflect addition of runit scripts
  * Fix lintian warning old-fsf-address-in-copyright-file in d/copyright

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 31 Mar 2025 22:36:28 +0000

incus (6.0.3-4) unstable; urgency=medium

  * d/control:
    - Update Standards-Version to 4.7.2 (no changes needed)
    - Limit virtiofsd dependency to 64bit architectures
    - Set minimum required version of qemu
  * Cherry-pick upstream fix to allow virtiofsd on non-x86 architectures

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 02 Mar 2025 23:07:28 +0000

incus (6.0.3-3) unstable; urgency=medium

  * Update organization of binary packages:
    - bin:incus provides all dependencies to run both containers and VMs
    - bin:incus-base has just what is necessary for running containers
    - bin:incus-tools and bin:incus-migrate combined into bin:incus-extra

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 01 Mar 2025 17:16:21 +0000

incus (6.0.3-2) unstable; urgency=medium

  [ Kwok Guy ]
  * Initial SysV init scripts for incus

  [ Mathias Gibbens ]
  * Update years in d/copyright
  * Update d/README.Debian
  * Cherry-pick upstream fix to remove virtfs-proxy-helper dependency
  * Cherry-pick upstream fix for qemu device_id warning
  * Add startup wrapper script to allow directing logging to syslog
  * Add a patch to adjust the MinIO client's binary name to reflect Debian
    packaging

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 26 Jan 2025 01:19:17 +0000

incus (6.0.3-1) unstable; urgency=medium

  * New upstream release (Closes: #1090375)
    - Includes fix for CVE-2024-6156
    - Rebase d/p/002-adjust-import-paths.patch
  * d/control:
    - Set minimum required version of golang-starlark-dev
    - Adjust recommended and suggested packages
  * Mention the swtpm-tools package in d/README.Debian

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 20 Dec 2024 02:44:01 +0000

incus (6.0.2-1) unstable; urgency=medium

  * New upstream release
    - Rebase d/p/002-adjust-import-paths.patch
  * d/control:
    - Bump minimum required version of golang-any to 1.22 per go.mod
    - Set minimum required version of golang-github-openfga-go-sdk

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 19 Sep 2024 03:05:28 +0000

incus (6.0.1-3) unstable; urgency=medium

  * Team upload.
  * Upload to unstable

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 17 Aug 2024 07:21:34 -0400

incus (6.0.1-2) experimental; urgency=medium

  * Team upload.
  * Compile against go-criu v7, Closes: #1078217

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 08 Aug 2024 19:01:26 -0400

incus (6.0.1-1) unstable; urgency=medium

  * New upstream release
    - Rebase d/p/002-adjust-import-paths.patch
  * d/control:
    - Update Build-Depends and Depends
    - Add minio-client to the list of incus' Recommended packages
  * Update d/watch for upstream's LTS tagging convention

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 29 Jun 2024 02:08:43 +0000

incus (6.0.0-1) unstable; urgency=medium

  * New upstream release
    - Ship shell completions for bash, fish, and zsh
  * d/control:
    - Update minimum major version of golang-github-zitadel-oidc
    - Update Standards-Version to 4.7.0 (no changes needed)

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 11 Apr 2024 01:01:17 +0000

incus (0.7-1) unstable; urgency=medium

  * New upstream release
    - Update Build-Depends and Depends
    - Package incus-simplestreams in bin:incus-tools
    - Don't build tls2jwt test binary
  * Sync incus-agent scripts with upstream (See #1064213)

 -- Mathias Gibbens <gibmat@debian.org>  Tue, 26 Mar 2024 23:03:26 +0000

incus (0.6-2) unstable; urgency=medium

  * Fix incus-agent injection if $PATH is set in /etc/environment
    (Closes: #1065174)
  * d/control:
    - Add Depends on iproute2 (Closes: #1064852)
    - Suggest bash-completion in incus-client
    - Set minimum version of golang to aid backporting
  * d/rules:
    - Remove unneeded override of dh_installinit
  * Don't print install message on upgrades

 -- Mathias Gibbens <gibmat@debian.org>  Wed, 06 Mar 2024 02:48:38 +0000

incus (0.6-1) unstable; urgency=medium

  * New upstream release
    - Update Build-Depends and Depends

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 22 Feb 2024 23:24:32 +0000

incus (0.5.1-3) unstable; urgency=medium

  * Source-only upload for migration
  * Drop lintian overrides for removed tag
    package-supports-alternative-init-but-no-init.d-script

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 12 Feb 2024 10:34:51 +0000

incus (0.5.1-2) unstable; urgency=medium

  * Add a golang-github-lxc-incus-dev package

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 03 Feb 2024 14:34:36 +0000

incus (0.5.1-1) unstable; urgency=medium

  * New upstream release

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 29 Jan 2024 20:31:42 +0000

incus (0.5-1) unstable; urgency=medium

  * New upstream release:
    - Drop patches applied upstream
    - Drop patch that disabled Loki integration and update d/README.debian
    - Update Build-Depends and Depends
  * Update years in d/copyright
  * d/rules:
    - Update list of files and directories set in DH_GOLANG_INSTALL_EXTRA
    - Set HOME environment variable for all manpage generation commands
  * Rename d/README.debian -> d/README.Debian

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 26 Jan 2024 01:06:09 +0000

incus (0.4-1) unstable; urgency=medium

  * Initial release (Closes: #1042989)

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 12 Jan 2024 17:21:36 +0000
