-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Feb 2026 23:53:22 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: i386 Version: 5.0.2-5+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u3) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: a116627eb9bc7fcd90450ca8fbd6f0c60a117bcc 3566404 lxd-agent_5.0.2-5+deb12u3_i386.deb e6a04bdd4926aaf349a25de3d5969b6d1087d558 4662640 lxd-client-dbgsym_5.0.2-5+deb12u3_i386.deb c78666f9b7ae7cccc557c3b91ca7e4f9591f2fde 4223804 lxd-client_5.0.2-5+deb12u3_i386.deb 9adc37e5b0b4f07bcc732bb5798fa6516e077255 14866064 lxd-dbgsym_5.0.2-5+deb12u3_i386.deb 8ade5d2ea1d5392ecfc70169ad6e9afea826e2eb 5622864 lxd-migrate-dbgsym_5.0.2-5+deb12u3_i386.deb 640699753ba044431e5756f7798f9b59d4c96cbc 4740400 lxd-migrate_5.0.2-5+deb12u3_i386.deb 3c794844d8d403dceb32304dd68603af045e2108 11714468 lxd-tools-dbgsym_5.0.2-5+deb12u3_i386.deb 3c0b4d40e6bfc6b0cf02bd49c4924c13b89f0658 9421248 lxd-tools_5.0.2-5+deb12u3_i386.deb b25997950e095510b9155a1e1b8ce9086eaf8c56 22393 lxd_5.0.2-5+deb12u3_i386-buildd.buildinfo 7933629c4f2bccfad4d35f5556ce757232f99be7 13144056 lxd_5.0.2-5+deb12u3_i386.deb Checksums-Sha256: 04a243ace743c72aeaaa07bed98a6949d1ebe6b4f4f16b5bf059a47dbca8653e 3566404 lxd-agent_5.0.2-5+deb12u3_i386.deb ef3352351df240e32448a73796e31488badfe5d9e20f7e4f40953809f7c5528a 4662640 lxd-client-dbgsym_5.0.2-5+deb12u3_i386.deb c69b9b0825669460c4926c1ef797101674150418d0478f038c005a6a9dbbbdab 4223804 lxd-client_5.0.2-5+deb12u3_i386.deb 5322988e6ac24855b99c3dbc41093f82c12f62d458f1a1cdba9af825f418604a 14866064 lxd-dbgsym_5.0.2-5+deb12u3_i386.deb 1cfd883e3fdf5a9ac8b9c5739447ba2e02982fc9668fb18d62273f3b31ad7406 5622864 lxd-migrate-dbgsym_5.0.2-5+deb12u3_i386.deb e8c7a963962863b676fe42609460628907d971d8908de590b832532c8e84fa95 4740400 lxd-migrate_5.0.2-5+deb12u3_i386.deb 2630eef39890bdfe43f4a5b35ad014d323dfbd67a73f0a6b1d47aa9adc834337 11714468 lxd-tools-dbgsym_5.0.2-5+deb12u3_i386.deb e1548198575711ae1d2ce72a928f4fa4b60dba983497b6519693735dc2c48760 9421248 lxd-tools_5.0.2-5+deb12u3_i386.deb ec50a21c033e8d4be05a12263451e51f407b43f1efc688d5b3cf7cf25f4b8090 22393 lxd_5.0.2-5+deb12u3_i386-buildd.buildinfo 5ab03731c5c510cc3d102c403aa488aadf46ef4339548760f1d932ac32a491d4 13144056 lxd_5.0.2-5+deb12u3_i386.deb Files: cd174def66e5c0c97d4b4c6d6f09e517 3566404 admin optional lxd-agent_5.0.2-5+deb12u3_i386.deb ba016ab1852832449835cb75a8d7f9e5 4662640 debug optional lxd-client-dbgsym_5.0.2-5+deb12u3_i386.deb d437aad65ba81bec98d340c3eb5611a8 4223804 admin optional lxd-client_5.0.2-5+deb12u3_i386.deb 8f467b55076e87d6fa67261e3e94c21b 14866064 debug optional lxd-dbgsym_5.0.2-5+deb12u3_i386.deb 93a52e0be26b2c4c525d1b9d939afe5c 5622864 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u3_i386.deb acf468b8ae6f0a8a9bb20c2af7d5e93c 4740400 admin optional lxd-migrate_5.0.2-5+deb12u3_i386.deb 93bcb6befe7a165fb6d0682cb2504fa6 11714468 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u3_i386.deb fedfa7256875534363e90b445a6139e4 9421248 admin optional lxd-tools_5.0.2-5+deb12u3_i386.deb f53558cafb91ecb998fb08d625e6f23b 22393 admin optional lxd_5.0.2-5+deb12u3_i386-buildd.buildinfo e4f855fab9a38b2d51076d20f651d436 13144056 admin optional lxd_5.0.2-5+deb12u3_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEv2qEY4xQXyY/2dWIvGw9w6VrLCcFAmmjKssACgkQvGw9w6Vr LCfBVw/+NstnnGmOoEooWNYVw0Oko5puBfWVnC5+jGLnNOPlO4NOwvoFxXSB6KEZ dNEnsvKUoALegJk5YY3iiVUDCxbI5FBQbykSMMFbIcjEEp7/Rft4sfAPqyNV6v3f wRPxcOdNnjGRYyEBS4jYj+ceyPF/5UnxdF+2XAk6wZEkQ8QZ6NxaUZQgyOPnwYXT 0CtoEtbqhVkUJtmJZDC2ktYXP0tAtkm7z8kqe86VmbDltPKPN/gPs9F9VI7J/9at J5scru+PlwfVhevWCw5b/sh76hnBcbwxU2IbeOxtbYKDOw8okETSvpmkr+ms7QXW Djbo1oSetUDxctsKKgHXG4OAtARQQccC2GdcF0GgeMXJL0Gbb7faAjV9Z9FdSY4A 3UGIkpQwjwN/t7EdRCNr/76JhGICAM6/YknhfixZOWT7u3JKEi6zyaPfeBFhAAs8 2WYtL5hQQbvSjr9ZRialzL8WEs/OJHNfgqM7p1jY3i7ohWqLZsd2er+dmsxtrCVi i2QFddYBsU7knadOZ1q8UCdEK+ZlLm1c8LXNMMENTlvqWyQnmSpBnwp5vcPgY/Z8 yW/KtgbCwzmy6qRq7xkCNm7R8OXG7MX7YC12VTyU0At/nEafgnodufM38oqXN5Ja hovs0Nd/8bm+uDQ+UYQ8l/xT03YaZLt84DGav119ejCcBx94KYY= =RMvp -----END PGP SIGNATURE-----