-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:28:54 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: s390x Version: 5.0.2-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u6) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: 0efdbd6da8763409c4d2cec4c26f4fe577b94778 3441624 lxd-agent_5.0.2-5+deb12u6_s390x.deb 18fd8d546d09a0d72e1826461092425b4df99f3c 4504096 lxd-client-dbgsym_5.0.2-5+deb12u6_s390x.deb 3ced6a69d791013bef2b1f97ca30e96376c14e07 4080372 lxd-client_5.0.2-5+deb12u6_s390x.deb a2d200e35e5e9e4a8de7e10153539945403e3b06 14580968 lxd-dbgsym_5.0.2-5+deb12u6_s390x.deb b0bad016d980e7cf5e25c932ef5a60045581bd08 5464408 lxd-migrate-dbgsym_5.0.2-5+deb12u6_s390x.deb bb2ad046b6673dd92123b6d4ae571d8a98d4309b 4577576 lxd-migrate_5.0.2-5+deb12u6_s390x.deb 09dcfaf34dc9389eb09a7a043d6dc39c762db3f0 11236272 lxd-tools-dbgsym_5.0.2-5+deb12u6_s390x.deb dd72e00914a062977b2fbdc9e1a54006280aeb51 9098908 lxd-tools_5.0.2-5+deb12u6_s390x.deb e2352027de4d31a09ce1a551d7a5d8af177b451f 22408 lxd_5.0.2-5+deb12u6_s390x-buildd.buildinfo 2fbe5f3ca7352da01cb319e6d08df91de8d5c52f 12693840 lxd_5.0.2-5+deb12u6_s390x.deb Checksums-Sha256: f02e69c1b14fceece59a7d83f7f0992c9b57cac35a0ba2f4eba94c60beabbc2b 3441624 lxd-agent_5.0.2-5+deb12u6_s390x.deb a738e0c24f7ba375f29794a45db6c1e288329e9673598a1465ad122ff8d80fb2 4504096 lxd-client-dbgsym_5.0.2-5+deb12u6_s390x.deb 7a53260ba1b2a64afee4d7a26c753b27a37a8ba18ad593123729df5c44d8f520 4080372 lxd-client_5.0.2-5+deb12u6_s390x.deb 8b50e081b0089aa69a72921ee630afdb363279cf4e06f35ec70e24fa2f5472be 14580968 lxd-dbgsym_5.0.2-5+deb12u6_s390x.deb dc2226140514c39f2586d78ebda2b4a370576b53a84eac18aed75a166bf6e6da 5464408 lxd-migrate-dbgsym_5.0.2-5+deb12u6_s390x.deb d4ffd1db9490111a95f9034f41ac00a623a7354ac0d06127567467b0ba7b6fa4 4577576 lxd-migrate_5.0.2-5+deb12u6_s390x.deb 337a75bb909cf035fe30959bf03915b06dd7aa2f2364ccd87dbd2ae252be34d0 11236272 lxd-tools-dbgsym_5.0.2-5+deb12u6_s390x.deb b0d37a70f24743544a0a58dce7cbc65bb400a295c039576d623a245d326aa6c7 9098908 lxd-tools_5.0.2-5+deb12u6_s390x.deb c190c39e23753a244e1f6434c986e1312d1e01c81213a3f76d08311040fff573 22408 lxd_5.0.2-5+deb12u6_s390x-buildd.buildinfo 54254df56fb49d82f02ad583535d6187beadb52d00bc2c33fb4c352836931e43 12693840 lxd_5.0.2-5+deb12u6_s390x.deb Files: 179f9b19ab672122c6913ed0b4b855ab 3441624 admin optional lxd-agent_5.0.2-5+deb12u6_s390x.deb 07f4f7b79b07031fcef3f7ecfc0bdb96 4504096 debug optional lxd-client-dbgsym_5.0.2-5+deb12u6_s390x.deb 3f4a27cacb9619a9ba5aee52013f2634 4080372 admin optional lxd-client_5.0.2-5+deb12u6_s390x.deb 77e86d382706630e784431c552b4d6d5 14580968 debug optional lxd-dbgsym_5.0.2-5+deb12u6_s390x.deb 4a63a8b1ae72a948c669dc2880ca12b2 5464408 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u6_s390x.deb b871d791609f186537c969ec4ab7a427 4577576 admin optional lxd-migrate_5.0.2-5+deb12u6_s390x.deb 767e88b8bac149bd907e881ef2ba263d 11236272 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u6_s390x.deb ebb3ed9fe1c462b1d1741bcf09181aa3 9098908 admin optional lxd-tools_5.0.2-5+deb12u6_s390x.deb bbede6ec53efce61ffe63424271e7dae 22408 admin optional lxd_5.0.2-5+deb12u6_s390x-buildd.buildinfo aff7f4260663ea0d2887cf0ccaa463bd 12693840 admin optional lxd_5.0.2-5+deb12u6_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmn3eskACgkQkaCrxAR3 BY29pA/8D8OIIfqYvzw22KFjhmLfWdhjzzo4w1zhth9NnEkQGbynO68ZfWMsgpJf bPVlGSuyH3TGLYHXT/kpXb10S1xSVoPICsf5UBj50OMW5A4A56wPdI0ZQ+P6nmhu a55onhd1hZ5wNoC6S20w5mL0gUFsHGaDebksuqIcxmF7+Vw4mWh3n3j5Iz8oLBd/ PdAuG62KquXn5Tk1nOXhCEkSfK5buwv+LCUs+FB4eTfohXenB4601nP7rkI7yVUC WSRKqqVkwbf227tnJBqRFkCNJ8J7ZEEMvnIXqM2F2NuKNG2ub5ACLaORCelii4qR OyQWq+5BzntLg2v7ZCqBrC3ezVEZoAEQuYuo7BhsO8hz6AGymqEM7bwOAALijIKT 6Evp7Gnb1i6nFZQzKZnH1kcC61t8S28KOFMtIHB4JnxjFPXVOyePH9WkTCb7kt25 MCNeo/Oed5hpJAvZ6jyl6f1ydnUBAFTmSH18o7zdMxnM7Ua/mSG2EaMUAMDJEJE9 vjxjlz6uJjg0mT9etxlWCbpsk7oue+ADsEZ3qWeC5irBA03oIjXucZf4CmbMuAx+ h4L4u9h1I3xbfJKfk7J6+Wpz/BxJWN5BZlOuNvMdcEz84iuCTSQdcpcdo9LDxdCn 5n9KnF6DtPfu+Utc1bGm1BBxbT5rZhcdqSGouTKC9aBBGmG3ysE= =busY -----END PGP SIGNATURE-----