-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Apr 2026 19:42:37 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: s390x Version: 5.0.2-5+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u5) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-34177 / GHSA-fm2x-c5qw-4h6f - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5 Checksums-Sha1: c0aa6d204dc49ca454e30e4cf6a3cf88ae612818 3442592 lxd-agent_5.0.2-5+deb12u5_s390x.deb b5ee350062327a0d36d48a21657c1edbe5a86797 4504096 lxd-client-dbgsym_5.0.2-5+deb12u5_s390x.deb e5a85a500b8a04dc28dfb74e48c4d0bd817209ce 4079700 lxd-client_5.0.2-5+deb12u5_s390x.deb 13d1fcc37ca8e3d28b4cc04e1add33d0a59d3117 14580908 lxd-dbgsym_5.0.2-5+deb12u5_s390x.deb 5a1c11d8fe132dbc0ffaa0605a85b1ede286303e 5464444 lxd-migrate-dbgsym_5.0.2-5+deb12u5_s390x.deb bc49bdd5c46cf88cb1fa04b8590e190233304ab7 4575476 lxd-migrate_5.0.2-5+deb12u5_s390x.deb 41cdb4a3b27a1f578819df818c856c1a8de3e623 11230884 lxd-tools-dbgsym_5.0.2-5+deb12u5_s390x.deb 3dd0897a26c4469c8db0e8f7db0cf25bdccb3b3e 9098052 lxd-tools_5.0.2-5+deb12u5_s390x.deb af544ee65ec6f4c179b8f339fb7823dfbaf23246 22401 lxd_5.0.2-5+deb12u5_s390x-buildd.buildinfo 0e10d0dfa6cbb1d209a21fc56ad0215e97cbe38e 12690384 lxd_5.0.2-5+deb12u5_s390x.deb Checksums-Sha256: d53fc65e487e19c552c5eb00b49b1a153035cddd00a461cff4e1583f292f413e 3442592 lxd-agent_5.0.2-5+deb12u5_s390x.deb 2942379f0c50c9b6dd195254acfdc52c92323297ae57120591f79e998598cf57 4504096 lxd-client-dbgsym_5.0.2-5+deb12u5_s390x.deb d1bc677242e09fecc309410389c4096c06eb726ae9ccc244da7c428a0709658b 4079700 lxd-client_5.0.2-5+deb12u5_s390x.deb 68bb72b275369932966f00420868c65054b831ed94f1e7adf82421b74340719d 14580908 lxd-dbgsym_5.0.2-5+deb12u5_s390x.deb 4f2f16f88b998587b786ef062e58b47794015b34590ed39ce2436f1145b120fb 5464444 lxd-migrate-dbgsym_5.0.2-5+deb12u5_s390x.deb 794238e9c6be585a7827216332383293a6c95431988a788e601b7b03628fe7fe 4575476 lxd-migrate_5.0.2-5+deb12u5_s390x.deb be4c272a7fb9a452c5e37d5ccd4d20e9094511f711fe91249541b4c94aa99ce7 11230884 lxd-tools-dbgsym_5.0.2-5+deb12u5_s390x.deb 3ea8d3ec4eb475e685c52b5fd073ad843e551612288d098eb85397957660ded4 9098052 lxd-tools_5.0.2-5+deb12u5_s390x.deb e1a4509b8b6a845f89b5b6b42d512f9179de4653f7a80635bde897ef1ea957b5 22401 lxd_5.0.2-5+deb12u5_s390x-buildd.buildinfo 32ad5870ea454fe2228301c454ea9b8f366df368c6da73d4351fd7ad1f54aba0 12690384 lxd_5.0.2-5+deb12u5_s390x.deb Files: 2d4df7e3bfdf3250f6ddac60ab0c8745 3442592 admin optional lxd-agent_5.0.2-5+deb12u5_s390x.deb 3714a85fbea236a7339f970c01409b9b 4504096 debug optional lxd-client-dbgsym_5.0.2-5+deb12u5_s390x.deb 70a462f01365695a1d29882e4e34c731 4079700 admin optional lxd-client_5.0.2-5+deb12u5_s390x.deb cdb68ba7f0795d062ddb6b720936b287 14580908 debug optional lxd-dbgsym_5.0.2-5+deb12u5_s390x.deb d01b28aeaed2f2be3a6a6ea9241d0e55 5464444 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u5_s390x.deb 8eb67f93ccab9fc1f5a0721f8e27a6ba 4575476 admin optional lxd-migrate_5.0.2-5+deb12u5_s390x.deb f7248f10056e71b90dcd9eb809b62ea9 11230884 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u5_s390x.deb 680227becc8caf2221be46a81ac9b0ac 9098052 admin optional lxd-tools_5.0.2-5+deb12u5_s390x.deb 056ae5d0648f6806d1a1f91155f76540 22401 admin optional lxd_5.0.2-5+deb12u5_s390x-buildd.buildinfo d21d811b6ff29009fe31ec533749b9ec 12690384 admin optional lxd_5.0.2-5+deb12u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmne0swACgkQvVOPI7pY NphA+g/+Ku0Lrf7tM2X8G3wZVX0o+3WGxVCNLm2cI+t0wjzE7vsTsruurRqffT8C R1JdqDeJ5kD2g+Ylj5g04vc20A1IFsh68MhxsmUgAh1JtPSrE35TyNWmPEX+FzOT fS8U0eZ5n4d6/pFMikEYN68YDeqR6jtu4cEYRTXGTZcjSmGnWh24/Gexa+thdxPm 5kBCenRbmfVSJNid17MznsTWGFFwxZwcc3bI6gxs4xgxe2CaiHN70bgt3L/YIiXh yHMrAHo2HrNosBPAePe+ytkeAJvRj18LBRVHWUAFiULf0Z7y6RIN5Nd23IF4wXuQ ZGlh8nQ1lVn7xxsrtiyoLWBR3AUUJGzwT273rx+AxY4TBfOpW0C6Pe2KMxkxeZtA sMz5qqbeWgnPyZldSYt0/zMIpPpvi/mpYFGXMiaefNygjX70W5ePWtBwTYdpFhXW 0vZbB4pxygfjkLYAWRecmJw9uw8asHwR5fhqEqeKHP/VMM9qp972TWo5pgdu6O6Z IsqQdoauMPJb+Z3+Y50emb5BMN+kaS69Lztd3EDmqrJfmLDRpxyIbC3TubNG+zCF 4kXsM7xL2hHPrLB0Y5ZcD1TcosxuPAIivMKzD8HbgryLI0a4J2tz8IxIrJU0TgDb 83h8g7YsO6zoCHS11Uo41NfzI8hmk9h1xrQJIFUuwB3cixwhk08= =VZde -----END PGP SIGNATURE-----