-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Apr 2026 19:42:37 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: i386 Version: 5.0.2-5+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u5) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-34177 / GHSA-fm2x-c5qw-4h6f - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5 Checksums-Sha1: 4d9460800efd18169af3ec04de5d1a101fbec91c 3566124 lxd-agent_5.0.2-5+deb12u5_i386.deb 6199fd73ea95b7e12d5c602bb51ca949a3324e3c 4665144 lxd-client-dbgsym_5.0.2-5+deb12u5_i386.deb 4a61f9cb5f7caace44552910851f8960661a43df 4223496 lxd-client_5.0.2-5+deb12u5_i386.deb 5156017942743ab9a6cd664abbd0b5da4905282c 14786888 lxd-dbgsym_5.0.2-5+deb12u5_i386.deb 4111d4ff8ac25f4d7c08de655b7ceb88c57a39d0 5625924 lxd-migrate-dbgsym_5.0.2-5+deb12u5_i386.deb d958c81cd13bddea8a3d883b6beb7cd2f233a4f5 4741664 lxd-migrate_5.0.2-5+deb12u5_i386.deb 03b4eb44b0a368e2d52d0cb35c72bcb9b69f71f5 11725284 lxd-tools-dbgsym_5.0.2-5+deb12u5_i386.deb 21ec631894838b3daed191377bfe92157c6f0ed7 9423684 lxd-tools_5.0.2-5+deb12u5_i386.deb 78733e024ed000a59e8f0dca0f52a6806d939e73 22433 lxd_5.0.2-5+deb12u5_i386-buildd.buildinfo 34e81fcc276e7207ecd13019e912d771a6c0a395 13148348 lxd_5.0.2-5+deb12u5_i386.deb Checksums-Sha256: d1abf46b2c8b39b782374c6f22db21cbb6a025a71163c071d03f433778638a87 3566124 lxd-agent_5.0.2-5+deb12u5_i386.deb 6dc10cc8869a88df991f509b6763bd0a6350f3cd5cd724a89de95a476672a24c 4665144 lxd-client-dbgsym_5.0.2-5+deb12u5_i386.deb 49d33e21cea024a0575b681160dd2d1e7a9be6cf5fb521a47930e77474c71d22 4223496 lxd-client_5.0.2-5+deb12u5_i386.deb 7a4e01ee159b09b84680212e5c42bc1a2304c0da26ab0c06aeef0d163a5ee546 14786888 lxd-dbgsym_5.0.2-5+deb12u5_i386.deb 3bd6ce3ff2d72c6da93b8eea7e36d4d2319c4af517afbe9c256b98038bc443f5 5625924 lxd-migrate-dbgsym_5.0.2-5+deb12u5_i386.deb 8996b8ee063edd7c5fb1e8411ca8de1d568e5a0c1c15a7d5a6ec84a92183f877 4741664 lxd-migrate_5.0.2-5+deb12u5_i386.deb 71496cf748ca7265a184b659a970cd3828c0bb35ddc56999498016e0353f2b1c 11725284 lxd-tools-dbgsym_5.0.2-5+deb12u5_i386.deb 1977261c44a1a5cb89245c002eb5db767017bc36fd62afaa5fabf20b79266150 9423684 lxd-tools_5.0.2-5+deb12u5_i386.deb c1388480750817f7a4cc3647e694f4eaef4867dc497d7748ec4d015cd93ef6c3 22433 lxd_5.0.2-5+deb12u5_i386-buildd.buildinfo 68c44526f08714d1981641c07aa54e88cb74277637b400b72c7b3084f43815bf 13148348 lxd_5.0.2-5+deb12u5_i386.deb Files: e68d10216c35b5f6da3f1a33181f9a20 3566124 admin optional lxd-agent_5.0.2-5+deb12u5_i386.deb 2d977a031e90b2f328db91c03f6f513a 4665144 debug optional lxd-client-dbgsym_5.0.2-5+deb12u5_i386.deb 7c94e8a55e6f7655e5e05fe29107a5a8 4223496 admin optional lxd-client_5.0.2-5+deb12u5_i386.deb ebf70607d48e3147390a66bf0fe21e32 14786888 debug optional lxd-dbgsym_5.0.2-5+deb12u5_i386.deb e4fbc5aa1f08daff2bfbc29b25ed950f 5625924 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u5_i386.deb 09b864d41204d57bb065bbcea666d11b 4741664 admin optional lxd-migrate_5.0.2-5+deb12u5_i386.deb 7eefb085acf0064eb783abc955eb268a 11725284 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u5_i386.deb 06777e0e448fb4e0989c559fdb54f861 9423684 admin optional lxd-tools_5.0.2-5+deb12u5_i386.deb 285b1f350a2607fe46cd87c87e16b3d2 22433 admin optional lxd_5.0.2-5+deb12u5_i386-buildd.buildinfo 27ee24d1f2e14d162978d12e84b28a1c 13148348 admin optional lxd_5.0.2-5+deb12u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmne0lMACgkQTwt/65ON 6zeBOA//cDxLUu2U6lWJQA7ZvIPVFIbw0oQZ8orYMqqJTVx0EIcCezzeGS+NFFjZ 142yq0Xx91QY2UmlCnyxwiHnDkknbc42WvG533qwz4sZgoSquYY0WFecax65ZeyP SHBkdwwx0Wrd4K0/GJZmR0MydvOsXh9+AhqYriyeMk8CzrMiQarNnd6ERweb/uzc FbcUcDXaBOLnJJ1dvx8ReeH75VNPJ1qiejUKpPBYc0BX/8dgFj8VVuZSyf9kQNRD OzVKesqLDOVcmuq9C2kyZQa8Xt16aqOOPJQ7verfJV+zruOPLQW4VydT2MC/rgy7 mFp7p1utqwxyVwpgvkM06H3NK+e3gVBmKuQDsfLjhAO5RYtQ+vYM12VOdDhmXjl0 F5stA8ggHd+ALoGP2/kOL7yW7Leb2Ken1IB4/YRMYrHLh4XIjyi054VjFOeN/ATQ fArdKBfBwAxLAKsK0JL5SOXDZd3eu6anb9RV8CvMkXkz5y0vaf/AC70qEQiFb/ou 3K3BrlmOcULTZuNjnMwd6u7UrtO2Aa0bR43O37vpNiTn+Ew3hSQNh3Rz4zb53s4x 5rjNyo4vDdYWeJp63xVnzsptf4WZTJUeI1EEJXK3yNB2eTijo7zGnmepQCzXevFw Bmn8ckPqXLakCXUXmv1lTiN2Gbc0+aPBGOxMT8bxcIGIoPqmkuQ= =G6PP -----END PGP SIGNATURE-----