-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 23:43:38 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: arm64
Version: 5.0.2-5+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
     - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
     - CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
 24bd88b7ca455d254f2ebd3c7c34513cb1542af4 3259840 lxd-agent_5.0.2-5+deb12u4_arm64.deb
 c2a92d3ab38e0440982e222d889f2f7e7c8fe8ee 4290164 lxd-client-dbgsym_5.0.2-5+deb12u4_arm64.deb
 6857ba0f1ae7f75c37565f99d9ae229dfd8e84a5 3864116 lxd-client_5.0.2-5+deb12u4_arm64.deb
 a837979c76fc2d188eb57d7f2086af4ee0a43ff7 13808204 lxd-dbgsym_5.0.2-5+deb12u4_arm64.deb
 7bd198a1e0aa7a40c452e77238a9554fbc61d625 5243752 lxd-migrate-dbgsym_5.0.2-5+deb12u4_arm64.deb
 e0b0ff82597b86d6990d27d29d45c373b6c9bea3 4352516 lxd-migrate_5.0.2-5+deb12u4_arm64.deb
 d5d9969bbb48d527bcc4eec3fda56eb0cb4857bc 10767980 lxd-tools-dbgsym_5.0.2-5+deb12u4_arm64.deb
 3928d192cb54ea06dfea40394bec9ba5710d4498 8701312 lxd-tools_5.0.2-5+deb12u4_arm64.deb
 0497194b9281e464eddef6b35ad3553efc1501f2 22529 lxd_5.0.2-5+deb12u4_arm64-buildd.buildinfo
 c1162304023bc2b5f9f0f328927925b71bb8be91 12002788 lxd_5.0.2-5+deb12u4_arm64.deb
Checksums-Sha256:
 7aa7b3132bb0e273c4d385d5176b2f95e991bf69d1af9650a64d64aa34c1fc8a 3259840 lxd-agent_5.0.2-5+deb12u4_arm64.deb
 a74033184c23840732633878bd658e5559d22e708fdb5e62fd96bb021b1ffe70 4290164 lxd-client-dbgsym_5.0.2-5+deb12u4_arm64.deb
 ce2749f9cefedc48f8323a173be14644bdd39bbfe4b49ca4da1605a27b96a041 3864116 lxd-client_5.0.2-5+deb12u4_arm64.deb
 3f91090e6c2ad013c57f885844543706c00181c04080803e53a25692597fbdb0 13808204 lxd-dbgsym_5.0.2-5+deb12u4_arm64.deb
 4b5c2b357b66d09a6a6745667172ccd8fa3e7651a88de603352c56b7cfbd538f 5243752 lxd-migrate-dbgsym_5.0.2-5+deb12u4_arm64.deb
 b0c56c99e37181e4f9826d14ea921db010df79970d6db2db289fc70fab49641b 4352516 lxd-migrate_5.0.2-5+deb12u4_arm64.deb
 991567186aecaabcd157c55fe45eeb6c6a3b4ceb0a2c58c2a945397b9018bbed 10767980 lxd-tools-dbgsym_5.0.2-5+deb12u4_arm64.deb
 42dce1216c80848e94ae9b2e88f8c375b2e9c282595b1d2ccdce6e4072c9d8fc 8701312 lxd-tools_5.0.2-5+deb12u4_arm64.deb
 0d7c75120b7cd02d3690458aa1654be1f610a257fb66253b75ad50468864f3d7 22529 lxd_5.0.2-5+deb12u4_arm64-buildd.buildinfo
 0c748edc42278791420aabecb8e8b2df0326cc4fc694e28e81ce3976a903aa25 12002788 lxd_5.0.2-5+deb12u4_arm64.deb
Files:
 f2803a70b2f6769c51426f6d230fe6ac 3259840 admin optional lxd-agent_5.0.2-5+deb12u4_arm64.deb
 d47a1fdabb27f28224638b52b6a4a126 4290164 debug optional lxd-client-dbgsym_5.0.2-5+deb12u4_arm64.deb
 5332dd325481cc1d122b21fade641a0e 3864116 admin optional lxd-client_5.0.2-5+deb12u4_arm64.deb
 e2be960912c58da111946f5605e4a576 13808204 debug optional lxd-dbgsym_5.0.2-5+deb12u4_arm64.deb
 daca0f1e60e5f01fd387b1ab10bb2eb3 5243752 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u4_arm64.deb
 9c23d7a4d12942902c1bd9927c274e55 4352516 admin optional lxd-migrate_5.0.2-5+deb12u4_arm64.deb
 8429c8401b6e29c4994ed9b2936127fc 10767980 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u4_arm64.deb
 1fe1204142b888343e370c35edd6bfdd 8701312 admin optional lxd-tools_5.0.2-5+deb12u4_arm64.deb
 36101423e7f3d6afac60fc27e2ccb34b 22529 admin optional lxd_5.0.2-5+deb12u4_arm64-buildd.buildinfo
 128c6985f7402da46a956e40cf431109 12002788 admin optional lxd_5.0.2-5+deb12u4_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmnG7VgACgkQS/ZIXkV8
oLAvsxAAtTINyEqM2kEv6jd+GX5JR/TYiHRBAS5reWjRt4nBmX7JDF7NGpz4ZPlH
LC69D1WqDXWS7cOpgm9yLnyKwNg6EA3Z6koO2gzGfNDZPgZ58xgV4x7ff579KZAJ
RAn6z6TcH5VbePakhs3sn14JEr0lLDgE6sXIfwZY4yVb05c8SfDj5Eq6ZChVsELT
JR1Pn86yomOGik/XM8OLtiWpLCaqdu5QKGxyhj3SNpZUp2R2zAOQifZSDKn5PHQq
ypH57FKX76TkwoKon62RAH2vbKycb0S9ptrUhiOxjnOT21ovPgz9pfvUCIlbdP4/
u5KCjaA4gq80ORIFnxjmd5lOJmNTKD35DOUcYOVlazXEftMF2gUmxSgauA/Mucnt
bRMUOSJ77o+vDSsRS/bml3TMzpQTz/S3cDUb++xghIAmUwA0IAthTvS59Q+VVOSe
4ECEa74omQvS6pGx0JETnA6h8iKWG9/UwxwOX5lxPv3REg8X5F56bOpzWToPEeHm
KtLOiXfPy/yLO0gbtc674ZVFZ+1r0oQVeHl3MKHXrUe5xkwr79BtGn7OKAjJi7uK
mERZxyAqG2SQhd0qIQpR5QqUZcsYUwXpwe0Y8VmkbezSIEeAc9h0FxqfRzUFaEPH
KF7zUOReWLlISVsOqXMq89XJuJ+b4u+t/H9Kiasc7fQSsjWz1VQ=
=nDhs
-----END PGP SIGNATURE-----