Announcing Incus 6.23!

[Stéphane Graber]

Hello,

The Incus team is pleased to announce the release of Incus 6.23!

It’s also quite a busy release with a good mix of security issues
(mostly thanks to an ongoing analysis by 7asecurity), bug fixes and
performance improvements and then a very good selection of features
from expanding our OS support for VMs to adding more flexible instance
storage with dependent volumes!

Security fixes:

- CVE-2026-33711 (low)
(https://github.com/lxc/incus/security/advisories/GHSA-q9vp-3wcg-8p4x)
- CVE-2026-33542 (moderate)
(https://github.com/lxc/incus/security/advisories/GHSA-p8mm-23gg-jc9r)
- CVE-2026-33743 (moderate)
(https://github.com/lxc/incus/security/advisories/GHSA-vg76-xmhg-j5x3)
- CVE-2026-33898 (high)
(https://github.com/lxc/incus/security/advisories/GHSA-453r-g2pg-cxxq)
- CVE-2026-33897 (critical)
(https://github.com/lxc/incus/security/advisories/GHSA-83xr-5xxr-mh92)
- CVE-2026-33945 (critical)
(https://github.com/lxc/incus/security/advisories/GHSA-q4q8-7f2j-9h9f)

The full list of new features for this release of Incus are:

- Dependent storage volumes
- FreeBSD VM support
- Reworked CLI parser
- Support for disabling DHCP announcement of the gateway
- Support for ipv4.dhcp.gateway on OVN networks
- Support for io.bus on OVN NICs
- VM agent lifecycle events
- Reworked incus file pull and incus storage volume file pull
- Project related metrics
- Instance low-level repair API

You can give Incus a try online:
https://linuxcontainers.org/incus/try-it

Before getting it on your own system:
https://linuxcontainers.org/incus/docs/main/tutorial/first_steps

A detailed release announcement can be found here:
https://discuss.linuxcontainers.org/t/incus-6-23-has-been-released/26447

As well as a video overview of all the new features:
https://www.youtube.com/watch?v=PGo03etJsMY

The code can be found on Github:
https://github.com/lxc/incus

And support is done through our community forum and live chat:
https://discuss.linuxcontainers.org

Enjoy!

Stéphane Graber, on behalf of the Incus team.

[Christoph Willing]

On 31/3/26 04:00, 'Stéphane Graber' via lxc-users wrote:

Hello,

The Incus team is pleased to announce the release of Incus 6.23!

After downloading incus-6.23.0.tar.gz from the Github download page (and sha356sum checked OK), the resulting tarball unpacked into the directory incus-6.22 not 6.23 as expected.

chris

[Stéphane Graber]

Yeah, that's known. The codebase is in fact 6.23 but the Github
generated tarballs had a generator bug that used the wrong version
string in there.

We generally recommend using the signed release tarballs from our
website instead which don't have that particular problem.
https://linuxcontainers.org/incus/downloads/

Stéphane

> --
> You received this message because you are subscribed to the Google Groups "lxc-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to lxc-users+...@lists.linuxcontainers.org.
> To view this discussion visit https://groups.google.com/a/lists.linuxcontainers.org/d/msgid/lxc-users/a0498a4e-b7ed-42be-ac3f-83aa28f02f60%40linux.com.



--
Stéphane