From 44a706f18cf18a7ffa0f7999fb4948f13e9039f4 Mon Sep 17 00:00:00 2001 From: Thilo Fromm Date: Fri, 6 Nov 2026 10:16:03 +0100 Subject: [PATCH 1/2] package.accept_keywords: unmask incus-7.5.1 This change unmasks incus-7.5.1 for Flatcar. 7.0 is stable in Gentoo, 7.4 was stable in portage-stable before the Gentoo move. Gentoo currently does not have a stable version available for ARM64 at all. To mitigate, we unmask 7.5.1 for AMD64 and ARM64 for Flatcar. Signed-off-by: Thilo Fromm --- changelog/security/2026-11-06-incus-7.5.1.md | 1 + changelog/updates/2026-11-06-incus-7.5.1.md | 1 + .../profiles/coreos/base/package.accept_keywords | 4 ++-- 3 files changed, 4 insertions(+), 2 deletions(-) create mode 100644 changelog/security/2026-11-06-incus-7.5.1.md create mode 100644 changelog/updates/2026-11-06-incus-7.5.1.md diff --git a/changelog/security/2026-11-06-incus-7.5.1.md b/changelog/security/2026-11-06-incus-7.5.1.md new file mode 100644 index 00000000000..7ae6f2ff44f --- /dev/null +++ b/changelog/security/2026-11-06-incus-7.5.1.md @@ -0,0 +1 @@ +- Incus ([CVE-2026-85185](https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p),[CVE-2026-85526](https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv)) diff --git a/changelog/updates/2026-11-06-incus-7.5.1.md b/changelog/updates/2026-11-06-incus-7.5.1.md new file mode 100644 index 00000000000..cbad1cd486c --- /dev/null +++ b/changelog/updates/2026-11-06-incus-7.5.1.md @@ -0,0 +1 @@ +- incus ([7.5.1](https://github.com/lxc/incus/releases/#release-v7.5.1)) diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords index 38a78983774..a8abf4ea174 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords @@ -37,8 +37,8 @@ =app-containers/docker-29* =app-containers/docker-cli-29* -# To address security issues -=app-containers/incus-7.4-r1 +# Masked (experimental) in Gentoo +=app-containers/incus-7.5.1 # Keep versions on both arches in sync. =app-containers/lxc-7.0.0 From fb30b1cb9e9884a24cad9c7e8740f21e4729e0ca Mon Sep 17 00:00:00 2001 From: Thilo Fromm Date: Fri, 6 Nov 2026 16:09:35 +0100 Subject: [PATCH 2/2] Update changelog/updates|security/2026-11-06-incus-7.5.1.md Co-authored-by: Krzesimir Nowak Signed-off-by: Thilo Fromm --- changelog/security/2026-11-06-incus-7.5.1.md | 2 +- changelog/updates/2026-11-06-incus-7.5.1.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/changelog/security/2026-11-06-incus-7.5.1.md b/changelog/security/2026-11-06-incus-7.5.1.md index 7ae6f2ff44f..b469ed438f2 100644 --- a/changelog/security/2026-11-06-incus-7.5.1.md +++ b/changelog/security/2026-11-06-incus-7.5.1.md @@ -1 +1 @@ -- Incus ([CVE-2026-85185](https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p),[CVE-2026-85526](https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv)) +- Incus ([CVE-2026-85185](https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p),[CVE-2026-85526](https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv),[CVE-2026-81500](https://www.cve.org/CVERecord/?id=CVE-2026-81500),[CVE-2026-81501](https://www.cve.org/CVERecord/?id=CVE-2026-81501)) diff --git a/changelog/updates/2026-11-06-incus-7.5.1.md b/changelog/updates/2026-11-06-incus-7.5.1.md index cbad1cd486c..23fe4badddc 100644 --- a/changelog/updates/2026-11-06-incus-7.5.1.md +++ b/changelog/updates/2026-11-06-incus-7.5.1.md @@ -1 +1 @@ -- incus ([7.5.1](https://github.com/lxc/incus/releases/#release-v7.5.1)) +- sysext-incus: incus ([7.5.1](https://github.com/lxc/incus/releases/#release-v7.5.1))