-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Apr 2026 19:42:37 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: armhf Version: 5.0.2-5+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u5) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-34177 / GHSA-fm2x-c5qw-4h6f - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5 Checksums-Sha1: c8328d9de030097318b455eda53a7c9137b33bff 3274340 lxd-agent_5.0.2-5+deb12u5_armhf.deb d854217ce9ec83ab64802974dd5684b952929050 4281800 lxd-client-dbgsym_5.0.2-5+deb12u5_armhf.deb 0a9926cb8d3a6206faa39c2c04b8053282bc919e 3896844 lxd-client_5.0.2-5+deb12u5_armhf.deb c6832d791575c360b21b3208c2e2b3dd349a2770 13732136 lxd-dbgsym_5.0.2-5+deb12u5_armhf.deb 2e96061333a430b768d1ceba1ff154541c8765ca 5206196 lxd-migrate-dbgsym_5.0.2-5+deb12u5_armhf.deb 2d778f132c5c9953cee62dd543ab2ad64c435800 4387000 lxd-migrate_5.0.2-5+deb12u5_armhf.deb b9fd1483d4c9d95a539a31fa4332bdc89977a8a9 10805244 lxd-tools-dbgsym_5.0.2-5+deb12u5_armhf.deb c76e3138036cb14e1dbfec48f2400de58d45a11f 8648724 lxd-tools_5.0.2-5+deb12u5_armhf.deb d357517b459ea7e23ed01f841d7edfdb4437a019 22373 lxd_5.0.2-5+deb12u5_armhf-buildd.buildinfo 045255a594ac842db173c7e78e5b2076e3c12bc2 12223364 lxd_5.0.2-5+deb12u5_armhf.deb Checksums-Sha256: eb140ec7bd31ae9925d8969ec7498413a4907885dc246169a71cb0c719b92286 3274340 lxd-agent_5.0.2-5+deb12u5_armhf.deb d9c97a7d9e6aed7103db2180d717fbc9e411f4acc39d450b31f91fdd17536c9b 4281800 lxd-client-dbgsym_5.0.2-5+deb12u5_armhf.deb 6f30b32e3a14989d87eda6ba009a7d29c3eb4303dd6324832dfb0cabf038cb5e 3896844 lxd-client_5.0.2-5+deb12u5_armhf.deb 22c90eb4a4b53ef24f1d17b6ebd6e37548c1afe8e321b2faa10db51c340760ca 13732136 lxd-dbgsym_5.0.2-5+deb12u5_armhf.deb 58a307075fe0e0479e744fad86c011ca919663d8bec4f6bba9bbf1c4c586ac24 5206196 lxd-migrate-dbgsym_5.0.2-5+deb12u5_armhf.deb 8f45021420dd24685d3dfca1d6f01ec0d0f94ed6f25e55bc07d03f8b3398c796 4387000 lxd-migrate_5.0.2-5+deb12u5_armhf.deb 9535a39eecd6e86a1b4653189f1a591e11704cd226c90d7b7168c97e376b9974 10805244 lxd-tools-dbgsym_5.0.2-5+deb12u5_armhf.deb 4ee8a80ced99c1a990b76cd50776a8a591a112bbbbaa7028a2730ca98748b2a0 8648724 lxd-tools_5.0.2-5+deb12u5_armhf.deb a57f0ea030c4c1fe9f2db7ae28d9a56269180ffa789e0b32201d1596eeccb5df 22373 lxd_5.0.2-5+deb12u5_armhf-buildd.buildinfo c4f299d20e700579bfed987563b62b80157304fa77396502c0d1e2f8da0f6730 12223364 lxd_5.0.2-5+deb12u5_armhf.deb Files: 8c067540835ef85e2c897460cb11b85f 3274340 admin optional lxd-agent_5.0.2-5+deb12u5_armhf.deb 88bc73b8229c9ec8ed872568217749ab 4281800 debug optional lxd-client-dbgsym_5.0.2-5+deb12u5_armhf.deb e4112fd279e6d85ee1128a6d34662933 3896844 admin optional lxd-client_5.0.2-5+deb12u5_armhf.deb b5084e0d81b76d3be2a4cb946d002a7e 13732136 debug optional lxd-dbgsym_5.0.2-5+deb12u5_armhf.deb 3caaed939f2dfe8dab07631c2ad00f36 5206196 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u5_armhf.deb f9208dfab148918a0db3d00d1b0b50b9 4387000 admin optional lxd-migrate_5.0.2-5+deb12u5_armhf.deb 66ff67fe89e54cbc531994417b3fa1d0 10805244 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u5_armhf.deb e2ddafc9c43007425beef080e497a545 8648724 admin optional lxd-tools_5.0.2-5+deb12u5_armhf.deb 7706b28afd045d9f0bee21177505af60 22373 admin optional lxd_5.0.2-5+deb12u5_armhf-buildd.buildinfo 04afa49e7cf30773029bee2c2510d098 12223364 admin optional lxd_5.0.2-5+deb12u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmne0nAACgkQOQKMdMnE H5Mqkw/+LGHoxiREfcjORTeFvEOhpeJmoH53OxA3WgX8MQ2ejVUjg+jAYeIN0PBL e+185rPyfr9oFfxpa4nZGdg3Ld+n9/GEEs0pp7BsmzCxXk3GlhDGUK7nD2Q+Ujhy 1UDbj22teuRXYNDpRK4UV7spDhoOGGmAeFA2hWwzG+R66Akt8l/zsfb+DenqzFfx gSHxWYLuygU4KJ4KEBEB7dH0kb66THe2fALU1DEhMYVQnL6EQUZjLVbZfrjWBYfZ Fy1Mjlcm5csDRBdzg3/XGQnIlB0NsbgjxthZr4FtGuX8gcjW1Xx4QCAl8WNtAzfd 8hltUu8ftEasTht2ScLAq5ha2IUbNqVvuT7nhL4PUlUiCrO3DtD416E8+55zvQfc gMpsvMTU6VAe5CqnTL6eTvI4rSgszYcg6w5ISPTQBOCC9/PUWCiZgL45l8Fj5CFu bzBfrIQIVHqJoPsf7DLiDaGhn34VIKD+9pnpakLl6ZvcPQI/WQC23okgGiI2GA6f qdrabjuheOKbfJVxuMva78PiD0orZZjE6DltLel074/L/RqcjpNZCd3scwTpT8U3 ++gSJYMzs15hNimcrg0+TpoW4KyAhIU49OAcHu37S5izPskpzv2/dlFGVnC0gwMD Be8+vcTmWVPseyLm4JpuVZGvysdnCP4e2kMvrfsytilI9mv77uw= =levB -----END PGP SIGNATURE-----