-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:28:54 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: arm64 Version: 5.0.2-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u6) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: 025c58933ce22e4b761c6ae3ca93c596cf62b436 3259856 lxd-agent_5.0.2-5+deb12u6_arm64.deb 818131379fbc8e64b96685d9c47adbacd2119348 4290180 lxd-client-dbgsym_5.0.2-5+deb12u6_arm64.deb a25b8cfcf1bf67057fb8d419ef3f643cb3f7fc5e 3866164 lxd-client_5.0.2-5+deb12u6_arm64.deb 7c2a496d447817b5c6c47dca1ce78dda383cf163 13880244 lxd-dbgsym_5.0.2-5+deb12u6_arm64.deb a2838df2af60a082c0aeeb94704883fb0b41c2c8 5243908 lxd-migrate-dbgsym_5.0.2-5+deb12u6_arm64.deb a8a555db9b1fc36989386feec40fab57e152f369 4351264 lxd-migrate_5.0.2-5+deb12u6_arm64.deb 752258de438257b704451d9d5285bd72dcbbecee 10766044 lxd-tools-dbgsym_5.0.2-5+deb12u6_arm64.deb 8fb3a46b3c55bd4411cceaae341259b38a8cbb31 8700576 lxd-tools_5.0.2-5+deb12u6_arm64.deb d9f17a182e62a81d8485cadd9be0cc13f59686ea 22520 lxd_5.0.2-5+deb12u6_arm64-buildd.buildinfo 8ba44f243c6b522ed5d8815b04017fe5f84367c2 12007288 lxd_5.0.2-5+deb12u6_arm64.deb Checksums-Sha256: 357d77f012098ba990bc73733d8f7ff73204af03e0d2dfa199dc94ed978c6d20 3259856 lxd-agent_5.0.2-5+deb12u6_arm64.deb 96777fd9d3332bd922c43465e7039ca72c32d6db99979b8e9a5487c17f9e00a4 4290180 lxd-client-dbgsym_5.0.2-5+deb12u6_arm64.deb 2af431f3fa8652dfd453e21c1efd44ff6fcb2b33d44b95a31cb49ebce173f80c 3866164 lxd-client_5.0.2-5+deb12u6_arm64.deb 848c59d80a977fc765841f53edbef05fbaf3d22e703e77b1b3fc1efa14db5f0d 13880244 lxd-dbgsym_5.0.2-5+deb12u6_arm64.deb c1586a9916869f74687ca89f99a4634dc22a9e2b6803cf327c436aba5e4f8d86 5243908 lxd-migrate-dbgsym_5.0.2-5+deb12u6_arm64.deb 6ce6c530d0207cb00ad8c45a22b1f6039e50381c8faa4896e144ac64b6fed73d 4351264 lxd-migrate_5.0.2-5+deb12u6_arm64.deb 9e1cca6e70d7c505d980ef3e9e2022827eabfe44376f8fddd5d029d64c06ab83 10766044 lxd-tools-dbgsym_5.0.2-5+deb12u6_arm64.deb 94173bffd622749df4c6789e3e73eef0824845baa5f0bd736ace1c5f1d9c5f5e 8700576 lxd-tools_5.0.2-5+deb12u6_arm64.deb 856039c6b097f3b200e0535b9c179eb2e867848d71e1ac6f40077f6f629e4c91 22520 lxd_5.0.2-5+deb12u6_arm64-buildd.buildinfo fb05ccd841a3b09351d59049ea98cabae7723e2b7bd559674151a3e6ef703cc8 12007288 lxd_5.0.2-5+deb12u6_arm64.deb Files: 1d17377803aab844229894b4e3902245 3259856 admin optional lxd-agent_5.0.2-5+deb12u6_arm64.deb 2c82204c350b499641711b3491428f93 4290180 debug optional lxd-client-dbgsym_5.0.2-5+deb12u6_arm64.deb da6ff3e13d92ad0acfbc3fd4383e7452 3866164 admin optional lxd-client_5.0.2-5+deb12u6_arm64.deb a2919a4989f47993b849af788328e30b 13880244 debug optional lxd-dbgsym_5.0.2-5+deb12u6_arm64.deb 67f6d9b9c9c244044872acae906eb154 5243908 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u6_arm64.deb 4edcc5d3f2c4ffab9868c61f7aabb845 4351264 admin optional lxd-migrate_5.0.2-5+deb12u6_arm64.deb db5307195d39fd30f9329642af41c6c9 10766044 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u6_arm64.deb 44ed248ea21f51af4e3122615f7b5898 8700576 admin optional lxd-tools_5.0.2-5+deb12u6_arm64.deb 3ebeb34f9614b755a15b7ff026987d66 22520 admin optional lxd_5.0.2-5+deb12u6_arm64-buildd.buildinfo 22b85dba35581111854b1642d5dc35c8 12007288 admin optional lxd_5.0.2-5+deb12u6_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmn3em4ACgkQG5VHrWJm wgdMSg//Y6CXt4HYwUAEOv220EechrlfVZOwXxhPBHGr0vsJ5VVJeO2HxBS2DrBg 15fiEjtEgj3TOmFjPkKOEltNYYASGj2GZ46tmj4St9c0Rl0qMyxPQ5J95n6gZjGL HQkLZU8bw9YP+AN87rYD8ia5cIzC5lS3ObKhIOx4/Igz3ejxmk+F+Ab5jXr2F4mU yLX/pGAbHaNvtqIt2TONzaM9e8TZZGpN4Vqb0BbEfZ6QIDzpRmbiLRsld9kq2t6m ZFrgyBZakRgB98oO0BtoiPX7fPGT5Sh5SXh83DWRp0Ls7KUAGZ2f9PSwbw1wy4Wy fnwgSjn4ARKRIzdiWsZfb1BHoumsNv3CvqRQ5GUP030y4W/Ad2YQW5X8ixCSo1iO HXExyjI0wKtPi/NP2gZOrc6XUkfJSOZFatyLazxqH4mfSyj16jyWYP9Z2Y0nZSUv hJwm57ed8PhWrqsxsMESjortn2gHvnSCf1nDM7xl+GFbumL+DMnbSSs9pf+VaFfK fo/5XfD2eTuk7s5PI8xjmUk7i2XU5M37lx3gWhIp+6JOcjfmfNO41cCIfYSHuYVe 2y5ZhiG57XsOVxlnbNpdWxtqkxstDTgEEdeUGDmoOQzveptZ8w10BT7b2+6wgajm pqZ+P2O97NmtGaF9z3JDCzZjzumgDKXCLE/cy5cMLuRtWwXtoZ0= =KXvu -----END PGP SIGNATURE-----