-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:28:54 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: armel Version: 5.0.2-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u6) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: 3a6a7ab4506ad0d4240068e238ac5b21a4279ff4 3281140 lxd-agent_5.0.2-5+deb12u6_armel.deb a6e6e4e4ce4ceac9662e2edec0d3765d36477fe0 4282404 lxd-client-dbgsym_5.0.2-5+deb12u6_armel.deb 8d7ed3d7163e68a80c2b7c413adbc1e0e6ded262 3903716 lxd-client_5.0.2-5+deb12u6_armel.deb 0e83adeea6b164d36b1f0cbf6fb0007652c6d63d 13663736 lxd-dbgsym_5.0.2-5+deb12u6_armel.deb ba58b5f2f577c2a2f4e3304e68b730fbe62c4efc 5204412 lxd-migrate-dbgsym_5.0.2-5+deb12u6_armel.deb ecb1b1a5ae902c057c07073c7ecfd4666a3d89a7 4395032 lxd-migrate_5.0.2-5+deb12u6_armel.deb 09577aca072cadd7273f514ab27709eebfa61857 10809512 lxd-tools-dbgsym_5.0.2-5+deb12u6_armel.deb 232e1d5e781154f8d4c921eaa0f97659fb461b68 8664776 lxd-tools_5.0.2-5+deb12u6_armel.deb 59becd06cdb528de1b446cd87975a3af5480ac2c 22362 lxd_5.0.2-5+deb12u6_armel-buildd.buildinfo 57d6e67bdeedc500ae32ff51532b35a7ef315f35 12246432 lxd_5.0.2-5+deb12u6_armel.deb Checksums-Sha256: 9e1143241399155a1631d810996668da7deae3bd197c986d5b9b8a129322aa17 3281140 lxd-agent_5.0.2-5+deb12u6_armel.deb c435a9793c3692b4607e197aa46992b80242c03c04f48441e7f5574c763f33cf 4282404 lxd-client-dbgsym_5.0.2-5+deb12u6_armel.deb 1973e74a10c4c27fa698f53098a0b4f8ccd5ce08a3128bc58bc06916ba2dd7f8 3903716 lxd-client_5.0.2-5+deb12u6_armel.deb f82ab6f763f3ed9ee4a1a7a48f0bbda6064ac4d36debad093c4e7bcaca0697dd 13663736 lxd-dbgsym_5.0.2-5+deb12u6_armel.deb a30aed60ea6ddfbd5bc7b472f4d9bd49115919514c69875657febf096e0c381e 5204412 lxd-migrate-dbgsym_5.0.2-5+deb12u6_armel.deb 56983eb9d4bfc7c178127446f97f618e0dc27ceaf7a621192e11ed87788ab1b9 4395032 lxd-migrate_5.0.2-5+deb12u6_armel.deb c6b255eb87fb7b5428e0696caee907e8b92c1897fb9f2373b70b5e469c052ff0 10809512 lxd-tools-dbgsym_5.0.2-5+deb12u6_armel.deb a83f6101f42641458184161aee1501d1b5adc6de817866e6656d67fa072deee1 8664776 lxd-tools_5.0.2-5+deb12u6_armel.deb 305e402d35698c1f6b5bcc94f6cf373bc349253ac73ed31dd8e8f24313bc86df 22362 lxd_5.0.2-5+deb12u6_armel-buildd.buildinfo ad49fa92fb568091089b38cdd625318bbbaeb3830eb8e2251ed26c6596eb41c6 12246432 lxd_5.0.2-5+deb12u6_armel.deb Files: 17f14b474bcbb23146cd9bbb7b48eba2 3281140 admin optional lxd-agent_5.0.2-5+deb12u6_armel.deb b8b811b3e65ab898acae1b74f5c691d0 4282404 debug optional lxd-client-dbgsym_5.0.2-5+deb12u6_armel.deb 1f84819cd8b6af6d7bf071c895aa56a7 3903716 admin optional lxd-client_5.0.2-5+deb12u6_armel.deb f362440ee40e9e9885b0d5917e965249 13663736 debug optional lxd-dbgsym_5.0.2-5+deb12u6_armel.deb 9d22c9c82a5d98b68532ae680a353c67 5204412 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u6_armel.deb 3d09bf8ef8fd903ec4b404fd1820e810 4395032 admin optional lxd-migrate_5.0.2-5+deb12u6_armel.deb cf8222c7903a0eb5b9f74572bc7b17c5 10809512 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u6_armel.deb eec8253fc12b21e391919e11f9cb9f71 8664776 admin optional lxd-tools_5.0.2-5+deb12u6_armel.deb 2ed3a93378b48ccab3b148b2a6728cd8 22362 admin optional lxd_5.0.2-5+deb12u6_armel-buildd.buildinfo b0c269f98d9bdf485720ec5d138beb55 12246432 admin optional lxd_5.0.2-5+deb12u6_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmn3eoUACgkQVLd4YzMS DKH1RRAAsl7mcSReGiuRgRczLxv/9FdE6KZDQbFdBvQdgeYKvjFWhgcJD/SjXhmR eyHFZbIvBXpr60/cAZX+tgiWaF5QqSpuSkWI8CtFIgpJUZCavg8Xafag37+dzFrO 4p09LObg9QD7hESZMBJ0SfiR/QzNXUvWG7l0gLisX2IC4OSXAbWeYmGhm67FF3yr RJJ1hLldHtyxWuZpnFJYwo5yptfdfc+hb8CDAPipJmIzjw7U6ZmrfGgBmVmq15sF EMUjFj6zL+1/v7KDILID2qOwzFnCUZxhNy4SW1ACxMysNLXm0bVRLxxgpHehA+Y4 duijAVyN9liXvEBtnhqgzV/U/pBGt9bIeZJxaR0Sr0ouod1N5O3sM1OUomuJf8Mu 5WMJn+RRY65OOcZQTLi8RnImpjHqixyu5aGVSRGBNH2+gNS5a45KQTwxzDhifi4B hBdf/EMlPkcO8UuEQYzelRdmfkchU3yMPKsZT1DuKgB3QwbO4orVN2fvTc4gkQ4Z c7FrXSzq9W1YXEUc3lbjBwytBrGoMjNNPMRtmUQRgI54O09ZlWT7gd2imxNLbJQa J+EKjRlrBVNAgK58oKfEQx42izvTXtUChmmgCpJeWuGDLGAoDLyP50faHzY0kCYq zWMO5GuQJW9cCzO6czgkhC+06HziVchoFUzMtnDfb4Xxk3G6oUk= =gUjX -----END PGP SIGNATURE-----