-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 27 Feb 2026 23:53:22 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: arm64
Version: 5.0.2-5+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u3) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-23953 / GHSA-x6jc-phwx-hp32
     - CVE-2026-23954 / GHSA-7f67-crqm-jgh7
Checksums-Sha1:
 7a95adaf408facb0e0263b1c130fcb0b2accb049 3259740 lxd-agent_5.0.2-5+deb12u3_arm64.deb
 c87fef968900260f71cd7fe3a9113af9429fe422 4289848 lxd-client-dbgsym_5.0.2-5+deb12u3_arm64.deb
 53d610d7645b33746e799f4bad8e3b88b839c6a6 3863756 lxd-client_5.0.2-5+deb12u3_arm64.deb
 76ef78096ed24d7a595fd71b344530019b5f4a1e 13807488 lxd-dbgsym_5.0.2-5+deb12u3_arm64.deb
 1636d5f980cc5f042c97d3e381266f988f7feea1 5242040 lxd-migrate-dbgsym_5.0.2-5+deb12u3_arm64.deb
 d5076a6034885d73ae6ac539e2110cc0c7015892 4351696 lxd-migrate_5.0.2-5+deb12u3_arm64.deb
 6ce1750dcfd42d4eaf47928d1982d1a9c43ed1fd 10784336 lxd-tools-dbgsym_5.0.2-5+deb12u3_arm64.deb
 4745fd82db3cf5105cace6bcfa87b630eea299a3 8698128 lxd-tools_5.0.2-5+deb12u3_arm64.deb
 fe56c49b351d76b691178462756c3a6865f1a2d7 22473 lxd_5.0.2-5+deb12u3_arm64-buildd.buildinfo
 4f4893f38afdeeadd3e3760d6e0b72d9be1494cd 12005660 lxd_5.0.2-5+deb12u3_arm64.deb
Checksums-Sha256:
 0b15cae4493ffedfb72732336540992ea6ead6b11743c6da06880e10a43283c3 3259740 lxd-agent_5.0.2-5+deb12u3_arm64.deb
 e73832737ed7d3997cde59f3b057e07d2bed5424072b97f7880714c84d501443 4289848 lxd-client-dbgsym_5.0.2-5+deb12u3_arm64.deb
 a5ad48e928b540b5bb4bd8d147784abf4c56a768ba8b22d7f565f623249ff785 3863756 lxd-client_5.0.2-5+deb12u3_arm64.deb
 cc4026a1daae90b93d24d8f8d4dba8f2e0d3f792217b11a738b3771504fb1a2b 13807488 lxd-dbgsym_5.0.2-5+deb12u3_arm64.deb
 1cbb42a431fa203828c542e89bc27291434e7307b45d24f93791f018c3b780f3 5242040 lxd-migrate-dbgsym_5.0.2-5+deb12u3_arm64.deb
 5996c36b9c7988fcb4c9506f640bafccdd681302f3a0df859aab22b4cd5572bb 4351696 lxd-migrate_5.0.2-5+deb12u3_arm64.deb
 a8e7ac26fe26190e9c2312d8f1412a8b38023d9289e00f22b2d0dad772a19805 10784336 lxd-tools-dbgsym_5.0.2-5+deb12u3_arm64.deb
 5ebc095d9972eaeb858c15dda724e1d5ffce9a951003822c33a39d45e309d430 8698128 lxd-tools_5.0.2-5+deb12u3_arm64.deb
 95bc553fb78c39a65eed5f83a3907a262808e1616b4bc95d738f82789d21da28 22473 lxd_5.0.2-5+deb12u3_arm64-buildd.buildinfo
 b379c17ee7420d96a2d2a4a0d8a71e5874815a0eb8d8d65dcc4c31a19accb0b3 12005660 lxd_5.0.2-5+deb12u3_arm64.deb
Files:
 4f282d518dcda547407a75155695ae23 3259740 admin optional lxd-agent_5.0.2-5+deb12u3_arm64.deb
 7aad1f2e0c6f5080b5949ffdcafbe53c 4289848 debug optional lxd-client-dbgsym_5.0.2-5+deb12u3_arm64.deb
 d3599e11f2f3ee708f86f8bf09007fc3 3863756 admin optional lxd-client_5.0.2-5+deb12u3_arm64.deb
 6355aedd924463b63cba4158974beba5 13807488 debug optional lxd-dbgsym_5.0.2-5+deb12u3_arm64.deb
 ad8ef29d580de3081f589bae4412635a 5242040 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u3_arm64.deb
 ddb8bc25284bb294a2336194d58e3040 4351696 admin optional lxd-migrate_5.0.2-5+deb12u3_arm64.deb
 b6a419f9b301e31f9fd4008543b6af5f 10784336 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u3_arm64.deb
 ad32dcf04d13f8f7a833d787cca42584 8698128 admin optional lxd-tools_5.0.2-5+deb12u3_arm64.deb
 9844e68bc82afe41b15c5dbffb3d3946 22473 admin optional lxd_5.0.2-5+deb12u3_arm64-buildd.buildinfo
 a02abd3c33925c0b31a8fa5dbbe60e3f 12005660 admin optional lxd_5.0.2-5+deb12u3_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmmjK+8ACgkQCr/D/stJ
kDyI9hAAogYqMpSyN/e26apSIG09qUhvMwjtSt2ZN+4BcPwblJFrB+QgMjiBjwhH
FVLh1jiE+YpwzuNdY6IJxwuSKeP1VPED6J6kLGKjuxMErNnfesPJKOik3pquevPm
bWwiTlQ7KJ2nd9B3hiQQn+otqXXhyBphdG/cXBQdM+ipHo1Ft6VqNYTnfSyGGteV
tU4LsRgX3SwdYsezneJobsKF22xJ9rbWmX2oBb88SsrD5uk8tK2bNm/vE6i025GG
e9kMDxYK86Jcvdp3lUSbWrkmQ4ZxVoJKpaLLAC6dwoI8SagNFbxShMEvjEywvqvr
VfYaK09u6jsnyuzLMl7IW7nR7zzpjc9I0fk5RXCRZIChPkr7SJ8ZU0D28y/+NTgn
lVdMGzL88RxHZ3XS9UP6ZbV2O+V2LO6JA9bmhfIF8z+st+p8WfbN5PtVtWs3T8TS
hs/t7VbaCgrzVlyZpuxiGSspkztLX5XliFOOWwXlVD3dSxrzjPyBw16aWwwhr++Y
nEE91ItM3iqqmwztrA8cNNhbWT4ksSJ3gF0hDXDQEgQPOXyB4zNItA4HURIGAQeV
J4v16RGQnv8Xa0dvPx2xYHAIP3D8xIow29q89Hkeuj7yhpX/gwEQfw1Sqn6PHxKc
uNM1qClmBgxQ2jvqInky5RdIMKyj6L0AeSVxDYF7EwEwPeOWN5s=
=Ypt9
-----END PGP SIGNATURE-----