-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:28:54 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: i386 Version: 5.0.2-5+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u6) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: 82b0f5c7a654e5ceb4b0d80d86d72d04a64a3c2f 3565800 lxd-agent_5.0.2-5+deb12u6_i386.deb 2e595e080fd12bb8c20dd7ae6a8fcce1117fc5f2 4665144 lxd-client-dbgsym_5.0.2-5+deb12u6_i386.deb c1157dbe2d63c8f7a6d23295f443bff6ad0f46a7 4223320 lxd-client_5.0.2-5+deb12u6_i386.deb a47b76ac8abd203c8d65533b754042691a094346 14789368 lxd-dbgsym_5.0.2-5+deb12u6_i386.deb a2dc84c4f6e4e23a4a45ee0674c80f6c6ba895ad 5626088 lxd-migrate-dbgsym_5.0.2-5+deb12u6_i386.deb a5a1d31939f07a4ce5d5d562c5deaf776fefaefb 4741804 lxd-migrate_5.0.2-5+deb12u6_i386.deb 4228813acc92046d80958dc9b7b3a7855b9cdd95 11725520 lxd-tools-dbgsym_5.0.2-5+deb12u6_i386.deb 666d4ff78fe35594ad2fb8ba2042d155d74a365e 9422268 lxd-tools_5.0.2-5+deb12u6_i386.deb 46d9bf925e5b1f24b965807d4b892894c57a8f26 22440 lxd_5.0.2-5+deb12u6_i386-buildd.buildinfo 10eef8d187315d4e4812c08aa44fafca6057e4ca 13145296 lxd_5.0.2-5+deb12u6_i386.deb Checksums-Sha256: 9d69f4dca358a16d8f2158f74900343595d0f8d4757d4f7833d1266ef91f6370 3565800 lxd-agent_5.0.2-5+deb12u6_i386.deb 8025aa6fdd1748370fd6c3057b1cf567111349c98835b5130a5a9d781712c00a 4665144 lxd-client-dbgsym_5.0.2-5+deb12u6_i386.deb 12ed87fa57c7dcfbb6696ec82967b4f3d7fc5c9dbcc87ecc368bfd1a04e2a925 4223320 lxd-client_5.0.2-5+deb12u6_i386.deb f3ba75a22987fad9dc2ec4f567bc440f6048c720554ffc903d5182d129950a00 14789368 lxd-dbgsym_5.0.2-5+deb12u6_i386.deb 9c069b07b166a0b85b9788f6aae044c7a725fa46874596a1ada0b2921dc51031 5626088 lxd-migrate-dbgsym_5.0.2-5+deb12u6_i386.deb 353aa279dd71981bee269ac6554f229f369404701f2c831612cb55e076020df5 4741804 lxd-migrate_5.0.2-5+deb12u6_i386.deb 98457e4c7ede76f70e6520e1cd297606b89366370676ce79442b4bcfb7fb4b6b 11725520 lxd-tools-dbgsym_5.0.2-5+deb12u6_i386.deb ca567e9db2e75054c867954724e60dff5af60493f770517bfe6cc8f0e56dbb4e 9422268 lxd-tools_5.0.2-5+deb12u6_i386.deb 8bd82d1cad468f9089fae165cf3b6e9eb596d3687378da5dae6a0c2dfe242f7c 22440 lxd_5.0.2-5+deb12u6_i386-buildd.buildinfo 99eb1f3bedc4062ad22a8d23bdd244268a54fd5319170b62fd4339836976e728 13145296 lxd_5.0.2-5+deb12u6_i386.deb Files: 388be8c4cb0aa4f9415088b917f29634 3565800 admin optional lxd-agent_5.0.2-5+deb12u6_i386.deb becfd3037b2abfa8f8f69b00806ee6dc 4665144 debug optional lxd-client-dbgsym_5.0.2-5+deb12u6_i386.deb b5cc4cbab340d3f4b28d1808e66f9708 4223320 admin optional lxd-client_5.0.2-5+deb12u6_i386.deb aa687b9d0a575fd1d696e99bbaf575ea 14789368 debug optional lxd-dbgsym_5.0.2-5+deb12u6_i386.deb 259f79456eeaaa2cee44d9c1dadee297 5626088 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u6_i386.deb 45e21b7e36d90c139fdd08e4e00cb190 4741804 admin optional lxd-migrate_5.0.2-5+deb12u6_i386.deb d39afee4a5bee342fbd5325838683fc3 11725520 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u6_i386.deb 3f1f8be43414d0747619d6fd34d6cf23 9422268 admin optional lxd-tools_5.0.2-5+deb12u6_i386.deb b87f68eb3507a7d3a80be97c1ba723e2 22440 admin optional lxd_5.0.2-5+deb12u6_i386-buildd.buildinfo 10dba09ddaafeaa86de549cff7e51af7 13145296 admin optional lxd_5.0.2-5+deb12u6_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmn3eqEACgkQf2INRiCd aWJ28g//ZPt/7qiscGCSavZwm35yXHYv6r3giUfYx2UQfkMeMikzWgbLIvHp4dTL u7SRICe1X3bIAUMTgvUCWFEKbdC7RK7TKEQxDk0Gn7b9CDwo57gk+E1T28mT8em0 0ioVAaWCf/KG9XjA4Hxee6N7abrGFfh7twdad+iSG1WTPUWU6TQbf2uUerjOWETd iEOvVSTOIi+XKqNw4WrrzqJZI5a3dgFFPTwmrwkmlpFqWwqPDVRdJPnXOWWmXC/U 54XH2sz6UYqJgODWNZ7w05PNs5u2TMSKjngUOqpYRrGH3fgoV6ZQWR5WkwRrIAQ3 /SrN1yDQoyyT4dkWdPhZysw3inyyXTRo7vSOlIP5mwyQR+wGbtw7DtKzW3qEMIhs 02TTYPEjGYGG6P0XYk0RkQ37TUI63oSvP1vnB4QDyvrXRHV9TewJ/ISqwZi1VBb4 JqsR5PZfgf202teLkOEfx58XNrFIad1WtB9R7rAHRR9BpRL5tDlnxYbXwocEScWU wG8fkMmIUzVTeLi6SvBac+KB17XLSp55RwloVGZwIfb+RvgwrYQBp/mjUh1FJkTB dgGIDAA7iMNf9zzjazPd3uaqnDp5CToifLOmL2ihXtCLMpw2JvggC62ngqRT7+Al AL6gw+kyH8dHGE9tCljj/3I6dUQZBaU9aZBLZBU7Mvcz2/t59pc= =mkK4 -----END PGP SIGNATURE-----