-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 01 May 2026 23:29:36 +0000 Source: lxd Binary: golang-github-canonical-lxd-dev Architecture: all Version: 5.0.2+git20231211.1364ae4-9+deb13u6 Distribution: trixie-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Mathias Gibbens Description: golang-github-canonical-lxd-dev - Powerful system container and virtual machine manager - library Changes: lxd (5.0.2+git20231211.1364ae4-9+deb13u6) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues (from Incus): - CVE-2026-40197 / GHSA-r7w7-mmxr-47r9 - CVE-2026-40251 / GHSA-4m88-wxj4-9qj6 - CVE-2026-41648 / GHSA-67wx-r9xr-x75x - CVE-2026-41684 / GHSA-x5r6-jr56-89pv - CVE-2026-41685 / GHSA-98vh-x9cx-9cfp Checksums-Sha1: f89539a17e1ec183c5250f58946c88363c43cd28 1392616 golang-github-canonical-lxd-dev_5.0.2+git20231211.1364ae4-9+deb13u6_all.deb a840d00974e4a11cc9c6650900172a7b2cb02377 20879 lxd_5.0.2+git20231211.1364ae4-9+deb13u6_all-buildd.buildinfo Checksums-Sha256: 35a8c87c2beee4fec5b4f6c40acc8614f9adb36c23e0a1d81340e4fdf4d3c3ae 1392616 golang-github-canonical-lxd-dev_5.0.2+git20231211.1364ae4-9+deb13u6_all.deb bc4f44b447b69ae538302e6cb66ebb3546fce82a814a0c7783e9f58692b82237 20879 lxd_5.0.2+git20231211.1364ae4-9+deb13u6_all-buildd.buildinfo Files: d18fd3cef2b5dbfc0ff707d8accbbdaf 1392616 golang optional golang-github-canonical-lxd-dev_5.0.2+git20231211.1364ae4-9+deb13u6_all.deb d0b764205cb0640fd20ccc0c0f9a6568 20879 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u6_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmn3e0EACgkQmgPNRvTf /zd2vQ/8D+MwNN/gQnodJaXABTXUMuq81e3gRCZr64FzMiyimhGzd9M7PPM8dpeU 79fXc7Mj2DnEqMQXuHcZuplY1Dtxi8zrEsb1152cwjp0us+sH0xa9Su0f7oVA7/b 7NdWP+bQvK/05hziJDFQIRw8rbl1Bws2PDac5/kjcr4DFxqJowjuRkNvMiQ9CpSN X9VLrbJ6UmbmN59COz0HPXFJVon2iTI1wTzdLAVU20PAQCDz58gF+mJNVhRMMfqw bOnB2rSN/qHBT6fcb39M3U+aXZWnRaTp7/+22BkJ9W1j8WH+juV777jBJEtyhSKU j6hJgmSpZVpfgSrUAEcDdzq2PsZOhv9+9CKk8tcSSl/GaNFqgfhGzkGSxdMbzmvK U+TJofRRQmB/eLONPukESqAK4PAgUrr2wm3eUq1wRTWFCQgi0W5dQq+YNpCnV6SU NBZnZmmCoejqrIzNr56hBqEd9SaU2hvwtBzgqd24Aya+JXkQbpZiyKHDHmA9wS1J +w1bQ7+14rLbtycOX28qmnY9S3jCwWsF27YzrEiBvtvnDCXdL9oCB0FWwhp/HaOd GjGTL48Cr78za8EhezNBwdqvJWX/i06ynIr9YERrQr7oaaziFNoonYoEOSMJ1teC 8GBPXAAq8xstrCbJIjRYfdVg91itQJ8YA5pefvPnpzq87coCvjM= =MPMs -----END PGP SIGNATURE-----