-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Apr 2026 19:42:37 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: arm64 Version: 5.0.2-5+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u5) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-34177 / GHSA-fm2x-c5qw-4h6f - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5 Checksums-Sha1: 7856f474578551970239be5695465b80b47ea38d 3259260 lxd-agent_5.0.2-5+deb12u5_arm64.deb 02bf09925e230ea8e309bfc5de29b268a997a80d 4290172 lxd-client-dbgsym_5.0.2-5+deb12u5_arm64.deb 273b0b0e3bc1f9b9a033f46ffc3e5affb567bc6c 3862836 lxd-client_5.0.2-5+deb12u5_arm64.deb abe1ac833611cdfd69330619e15cc56d283e992b 13807636 lxd-dbgsym_5.0.2-5+deb12u5_arm64.deb f46cd856b4d47a5656da1c2da8f35218bc203440 5243696 lxd-migrate-dbgsym_5.0.2-5+deb12u5_arm64.deb 90ae8cfb93f526b2c7fa27bb158a1376c3aa92c9 4348560 lxd-migrate_5.0.2-5+deb12u5_arm64.deb aa7330263d9de0111fb0243568510c7741fca0b8 10759320 lxd-tools-dbgsym_5.0.2-5+deb12u5_arm64.deb 66f91d7487bb5163f32028354eb8a5f100ad30ce 8700820 lxd-tools_5.0.2-5+deb12u5_arm64.deb 26757a0f4a19024f23bc10ea6ce49a59ea631105 22529 lxd_5.0.2-5+deb12u5_arm64-buildd.buildinfo c10723d7eb439b8c67db263975b566265731f413 12006156 lxd_5.0.2-5+deb12u5_arm64.deb Checksums-Sha256: 4098bec09f2bb8b2f4aa9380e5ff5e00511d4ed2590336ab1f45f6d60cd19148 3259260 lxd-agent_5.0.2-5+deb12u5_arm64.deb f2ecb68c8b0f2eac39974dd806f392010b684ee7a93db9ec3ecfbffc937eca36 4290172 lxd-client-dbgsym_5.0.2-5+deb12u5_arm64.deb 33fb36e7a176e136d974ec932e33abf496c8753f7152003a456448964431da05 3862836 lxd-client_5.0.2-5+deb12u5_arm64.deb 3669d16853e942713d23ce2691725a62cc28a1ac186a38474079f2cbdd5039b5 13807636 lxd-dbgsym_5.0.2-5+deb12u5_arm64.deb f373194fec362799fc4e1110b9adf23477ba6c673a07ed79dd0bbc4d9ceeb630 5243696 lxd-migrate-dbgsym_5.0.2-5+deb12u5_arm64.deb 275c56371a654289e66594b6e0fb240b3e36f7dedf5f8eaef8615c93b75b4aaa 4348560 lxd-migrate_5.0.2-5+deb12u5_arm64.deb e1c843b14fe6cd6a2f70beabf93cdf4aa48f9f39a855bb8859663e0a42550f0f 10759320 lxd-tools-dbgsym_5.0.2-5+deb12u5_arm64.deb 24f324cec910e7d40a7704b4612b55d7b3c15274f329c60205e5f07591ceafc4 8700820 lxd-tools_5.0.2-5+deb12u5_arm64.deb 1ef2533983afaa204b28f425d00726cd2fa7621361183f2955cf563a78f01a4a 22529 lxd_5.0.2-5+deb12u5_arm64-buildd.buildinfo 02f991b510bef2afb55ec23f871a5513ee5ffdb46db1f36308239a5ef2e07b66 12006156 lxd_5.0.2-5+deb12u5_arm64.deb Files: 97d34147c3891c40fe7ca7ec534f4582 3259260 admin optional lxd-agent_5.0.2-5+deb12u5_arm64.deb 2a097fc4a2e30bf7853c17b16b39d863 4290172 debug optional lxd-client-dbgsym_5.0.2-5+deb12u5_arm64.deb e802783251b3081d26145b5e0e453611 3862836 admin optional lxd-client_5.0.2-5+deb12u5_arm64.deb a39ceaf3feff34bb66926de701288601 13807636 debug optional lxd-dbgsym_5.0.2-5+deb12u5_arm64.deb bc77ce88da3c8332d77db377c694f999 5243696 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u5_arm64.deb 3191ccb9979fae3b5d44ddbb605b6595 4348560 admin optional lxd-migrate_5.0.2-5+deb12u5_arm64.deb d57d0acb568be22cad5e36159d4d75d2 10759320 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u5_arm64.deb 28223a31d8703257d61293c681712a74 8700820 admin optional lxd-tools_5.0.2-5+deb12u5_arm64.deb 5f529604d032884c02a3855e744d9ac3 22529 admin optional lxd_5.0.2-5+deb12u5_arm64-buildd.buildinfo 6b66b84964c41dffbb00ced196019ce0 12006156 admin optional lxd_5.0.2-5+deb12u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmne0lcACgkQScpU3dYu lLhmrRAAuc8T7E+jqEyhrm43Hc44UWANnxDuCMV0kEXt6t/PKzydEQ4ItRItBrfs ha+T+YyMiHXDfUb0dvVgTwqqcu/faQJ07haru0+3H2+goEmPKHMwgY7S2ENVqeOn ns8ztuaZr90FA0KKMCnMKab1P0j0zJhEu+92IXA0oXV8j8v0QnELWV2qDqrwMbmx t2HxNjhttQiWNFC0EkpE2KAUmCtYpA/r/JKANUFbn2aZm1fDs/Rm+7HWR0quAlyi fTVViXhRoPhidxpvRjuCqIdatcl8Bq5rv+dtyccCwx65935dRLz3biNZKfgE9+44 lSWzl7OouSLkczGgkmFIt55IYINaviw65nz//92Izr16uD9HAcjznlFB4O3rHXhR SeCJqjcN71FkG2lDsEMkrFqA8p19Vqt0SGKgr0dXFuE8RsVvlhAztKNpJ7i3W5o6 Lq1mxkKYgzaymLIjOh+mrp+1cHAVGCLG6Tzk2ZfcEpP84QhC9hS/I59SaBPQeBSa XwBLn7E0k/OFXZyowESiuALEnRr5fUGsilLbumFvTJFhuUJNsN4s+ikwkgF6L/bn Wy6gPisw5WXLipawN8gCMIQoBj5+fomycxoqwlHfE/jePAiAiUBWZ7hlAlIpmAyi JCmmVu59s57DIrCsyPDKDUMstl+4uGQ85cIvvABrosCRylR93tg= =a3Pk -----END PGP SIGNATURE-----