-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:28:54 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: armhf Version: 5.0.2-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-06) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u6) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: 9a7c9f8dc697315c6627f9839fb15d4ee977ef00 3275564 lxd-agent_5.0.2-5+deb12u6_armhf.deb a2a0b8c13151f3eb138aa8ac34af82ebe2a3c1ca 4281800 lxd-client-dbgsym_5.0.2-5+deb12u6_armhf.deb 49883beb6c33ea2f22daecdf7db507a61328c896 3896736 lxd-client_5.0.2-5+deb12u6_armhf.deb 5257bdaafd914450750a08b89f2579bb695ff51c 13729464 lxd-dbgsym_5.0.2-5+deb12u6_armhf.deb 8ac347e4474406838e202e463b17938820dd1688 5206376 lxd-migrate-dbgsym_5.0.2-5+deb12u6_armhf.deb 0d0691b19470ef375a34b9ce01aa4c128530318d 4387624 lxd-migrate_5.0.2-5+deb12u6_armhf.deb 96c127ad703e2c8a3a1efb10a6875452a1cf0429 10804316 lxd-tools-dbgsym_5.0.2-5+deb12u6_armhf.deb c41c00c7a105bf9a9b3cc591d535278ca170d421 8647332 lxd-tools_5.0.2-5+deb12u6_armhf.deb d80a6bf7f2911ef85984f974374fad5d0824d510 22364 lxd_5.0.2-5+deb12u6_armhf-buildd.buildinfo e3911357f0b4d6aba4c8f67c0406c1766b1b74bb 12227532 lxd_5.0.2-5+deb12u6_armhf.deb Checksums-Sha256: 9edea2b18f29a2992cf34197b4dc592dbfe654d355215e1006eb9676e044c130 3275564 lxd-agent_5.0.2-5+deb12u6_armhf.deb 8c48aad5c7cb744419445deed18ff5e18aa2cf545873654593de3d6e7600c6f2 4281800 lxd-client-dbgsym_5.0.2-5+deb12u6_armhf.deb a8844804681cce1bca347996dac77a50177fed5dd4fa95625f87ba226032df5c 3896736 lxd-client_5.0.2-5+deb12u6_armhf.deb 405c163381888aa513fe26a33970a524500c6589c139c4f63d9a349b6352a29a 13729464 lxd-dbgsym_5.0.2-5+deb12u6_armhf.deb bd0f87bae265e5dae87131561ad897aca0e98e8ff4c0c405103ce96739654e24 5206376 lxd-migrate-dbgsym_5.0.2-5+deb12u6_armhf.deb 3d7ad0a66b99513f11e9e96144be04c3dec66fddb0722f9dddd07f160a356e07 4387624 lxd-migrate_5.0.2-5+deb12u6_armhf.deb bdb6323486669e688833c40d6af3a9cc1e15d1c70724768d2b4f18127abff532 10804316 lxd-tools-dbgsym_5.0.2-5+deb12u6_armhf.deb a01c4ef11a3212122609b0da3c09a11a117604847b9baac8c001f4efdec9d9bf 8647332 lxd-tools_5.0.2-5+deb12u6_armhf.deb 20adcb4aee2cea5753bd3b6361625415e41e43b7d6ead3dc1d68718527ce5330 22364 lxd_5.0.2-5+deb12u6_armhf-buildd.buildinfo fb7812f115920f314ddeeddaa4313b007f638d21d6f37f3913e992e08ee05664 12227532 lxd_5.0.2-5+deb12u6_armhf.deb Files: 4c43805737bf582d9335edadf43cb102 3275564 admin optional lxd-agent_5.0.2-5+deb12u6_armhf.deb 52e0a052286c7429b3897cf1345252f7 4281800 debug optional lxd-client-dbgsym_5.0.2-5+deb12u6_armhf.deb bc5db9c2008e611c1a7c1c15955d2fc1 3896736 admin optional lxd-client_5.0.2-5+deb12u6_armhf.deb a8c11c80dee67fee223fa1ed7f7a6394 13729464 debug optional lxd-dbgsym_5.0.2-5+deb12u6_armhf.deb e1fe9ad990672723dc61523345c1a507 5206376 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u6_armhf.deb 0d9e7d164af0d7a7bcb21a999c049791 4387624 admin optional lxd-migrate_5.0.2-5+deb12u6_armhf.deb 79a7d7b112c099c16f4132bc8dba8870 10804316 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u6_armhf.deb 46b47173bbc3f9dd7614cb2cce3762a9 8647332 admin optional lxd-tools_5.0.2-5+deb12u6_armhf.deb 8af9b5269d8430fbe98618b116249c8c 22364 admin optional lxd_5.0.2-5+deb12u6_armhf-buildd.buildinfo 3121c8415334a4ce0d36112d0b69920f 12227532 admin optional lxd_5.0.2-5+deb12u6_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpxWVfktWxVoKRwGgJ7tNDw2WyRsFAmn3epMACgkQJ7tNDw2W yRt7tQ/9GVezZpbHiwHWc+vyPApQ4DhVkUtwAL9H5C1lFUwllgH4UOaJxx5UOMNb iXRLrWodGEtiRs9p5XxtQBAC/ZyfisA4s18rMeQcMoVVjw/idkM/YV0b/jgvrgfr fvEnggaCRbjRWJVkVxmc1tw5eyLCR+FZmE+hkrXpSw2F2jDQTs4gbQ1mcE23+vFc 0RwgJxeVQTiDNj0ZvQBCfxXdV//wCyJ4anB8ognnY81cM2LXbD2gXEMSUTDM7R6U aJ+l5VqN+GIogdg7cwEeS7R69e4kF8mXfSCsCP2AMfsIhHHPLCiCWHr3QV/O3u+H OSibQDthSp6bcxUBNEjZW/MFSXiEniyjWlrnaDzCBYKlATR9blaxzq5+QvhszqZc Ar0DjUsdCe4XWHB345tc4b4X4AWys2gPZD7/8JA+Trzn5h9Ujom0Q4Z5kZUlIKvz lNvnZmcSuDwW6hnuzIbtPjUVbG9avMeAn0t1IoVgo5Gswu5iSb3vUtToLx+HCncD s1WJ/rojgjDPpZUIupXwxFJWVo13GL67K0xB2dH3pBlkV5bKa8O+V16bYxAZVE4i gFIeYQ15zCGbCmwUwtieNiKF+QDCxGAW9mhn/oBj7vO0gS6xvEenF3cMgzQ2/hfm 2nQP50cElgVurulFKG01UbDmMxZ38cTIyxH8cgEZTVHQeBRLDwI= =GTVh -----END PGP SIGNATURE-----