-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:28:54 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: amd64 Version: 5.0.2-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u6) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: 9e08a1f258122b096b209810f41f9d8904960a7c 3801532 lxd-agent_5.0.2-5+deb12u6_amd64.deb 17794efb28ef715bf8a86a45c6cf82f87fb4d645 4571452 lxd-client-dbgsym_5.0.2-5+deb12u6_amd64.deb 3dbd7a305beff46b2efcf5417eb44c3b61ffcd8d 4493636 lxd-client_5.0.2-5+deb12u6_amd64.deb 5515b71a7c8d2fbbbac46683497a012f698a1111 14685712 lxd-dbgsym_5.0.2-5+deb12u6_amd64.deb 3fa7f77b873ef5ffde4a972070429ac9b3e8016f 5560984 lxd-migrate-dbgsym_5.0.2-5+deb12u6_amd64.deb eff329725b0ff9ba1b579771bd289694f761be6b 5054096 lxd-migrate_5.0.2-5+deb12u6_amd64.deb c1beb02d2ed59d1b772944e11a518663f51868b5 11446896 lxd-tools-dbgsym_5.0.2-5+deb12u6_amd64.deb 4f17cf8b5bc097a2609241274459f39c0923174f 10035844 lxd-tools_5.0.2-5+deb12u6_amd64.deb 0feefbaeb975ebb1966e23bd513e2755a472c07e 22524 lxd_5.0.2-5+deb12u6_amd64-buildd.buildinfo 44fb407ffb73198c77f20bc53b6a4c9058595770 14039372 lxd_5.0.2-5+deb12u6_amd64.deb Checksums-Sha256: f14a465b4f06407a6ca0c6346a6751812dc2bfc96da8704b5ed17928beff57bc 3801532 lxd-agent_5.0.2-5+deb12u6_amd64.deb 0fd553c830c649cda71469dcdbc17874cf489350f3e77b209f0098a554b3af98 4571452 lxd-client-dbgsym_5.0.2-5+deb12u6_amd64.deb ce117f02101d58137f99c16800865746d90d87500c5986c537a923e56e7a2189 4493636 lxd-client_5.0.2-5+deb12u6_amd64.deb 2b322804ce5831fc845ff95204fc3db0694a24110eb3406b656b4d082366c46a 14685712 lxd-dbgsym_5.0.2-5+deb12u6_amd64.deb 6692e8c40fe991efa9e13c47d358c1bc62a41535de2ce0b858f5bcdef13b6be0 5560984 lxd-migrate-dbgsym_5.0.2-5+deb12u6_amd64.deb 44a475ae6c0b610e61e190307c12bc0a7a3aeb441a4737b17af183923fb3ef3d 5054096 lxd-migrate_5.0.2-5+deb12u6_amd64.deb d90d7d5f3513c5e17657e5e0a6c710e213c8735f540478f650418f6246f5b591 11446896 lxd-tools-dbgsym_5.0.2-5+deb12u6_amd64.deb 9fc439d0ee101e818be4966ab31b0a5367400497be4fe7c8eef41d397e3f4e7e 10035844 lxd-tools_5.0.2-5+deb12u6_amd64.deb 4a5eab11bf2c8159b8d9914d3ec405a09a809fca133708e7033fd776f31b2056 22524 lxd_5.0.2-5+deb12u6_amd64-buildd.buildinfo 6db9e692cfcd8ea944691601ec58488f6bb8312953e7ec4bb57fb6c06973be3b 14039372 lxd_5.0.2-5+deb12u6_amd64.deb Files: 0561d5c0a1add879f6fb2c34b711f91e 3801532 admin optional lxd-agent_5.0.2-5+deb12u6_amd64.deb 98924247907f22c19244c9673087d678 4571452 debug optional lxd-client-dbgsym_5.0.2-5+deb12u6_amd64.deb 58e7a4cea6510f6eda6c96923d18c7b7 4493636 admin optional lxd-client_5.0.2-5+deb12u6_amd64.deb ac8c1541a7e08eb5aa7df40ea07e3e6a 14685712 debug optional lxd-dbgsym_5.0.2-5+deb12u6_amd64.deb 1266dc62e5bc4769ebeaffaa835cc7a7 5560984 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u6_amd64.deb f1e672858cc996046bb6bb64eb3e6d55 5054096 admin optional lxd-migrate_5.0.2-5+deb12u6_amd64.deb 1411f05c118afec1920a4ffa6392c40d 11446896 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u6_amd64.deb 7d9651b74e3d6e0e0863eeb2201bce77 10035844 admin optional lxd-tools_5.0.2-5+deb12u6_amd64.deb 4f40efaa080f3101dfdad5f02a099ace 22524 admin optional lxd_5.0.2-5+deb12u6_amd64-buildd.buildinfo 0173f1099793fbc63faebe7c088ee0bc 14039372 admin optional lxd_5.0.2-5+deb12u6_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmn3en4ACgkQN8Ugyu9d QiQT8g//ZwCkvVzFmFTbkEo8WdyS1zJgpYnZ9UNqQu/rHD0ewxHPHNKQMcMETGnD mA8Fs3+oMXPj9n8UIhAyZVAK0dULR8JrG7VYY6BK45DAXiaOMMzvM39rHqrQqXkb +tXgvsMtw50aZ/BVZmyce7ePXNdA+ooTWu02YvQHxbOn7+A+c085ZBsMOJ4Yuch7 vmjNQH3XRcTmDKXdavlXQ7rd3c9SdU6FrsbMAH2SPqk6sOmrWBVwfqFatzS087a7 aJpaegDS9YnJv7VPqHEXztKt9Uuf0mZDBOUaCWSBkBJm5oNJ51wH9MftID0dtq3/ HisoInCl02dQJcRMeb38HQNQjNPtSgNIEvepqMSK0U3SqDWzqiE/jR8CG+d9CQzD 40U6WpveUshBf4izw43zeMSAwxnQJy62QH8LG64pFaGuSDTRFthzuRJ1yxwta8GD 4Ydl43q9W9DnWNRJOiWHQo9YiNhVGO1QLwDYOghC0z+idi9vBh/lRqW1OCK9EflA DpxTDNG0LxvjssrQ6YnwaN+DjGnCiTLISs7GrHLZEkQ1WdThBMHggqrHlALHhOqi IlI+9XAvktdzA5p7N7qrfhtHqKM4O+RuH8OzsMetWAeavAW7Q85rgvTOCkhHzGbL pbTEgbrCG6UYCZG0s3L1j7coL5xmcNMYzF3rTnEAfYGc7ZFkK2c= =P4Df -----END PGP SIGNATURE-----