-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 23:43:38 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: armel Version: 5.0.2-5+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r - CVE-2026-33897 / GHSA-83xr-5xxr-mh92 Checksums-Sha1: a894cd79151bb4f3c6b2deebae932f2034d6b3b5 3281532 lxd-agent_5.0.2-5+deb12u4_armel.deb d71abf5673194959f7938905aa3e17a1bb0c262b 4282408 lxd-client-dbgsym_5.0.2-5+deb12u4_armel.deb e5344c6160d623c65af403b032de9926a1f71322 3904860 lxd-client_5.0.2-5+deb12u4_armel.deb a5cc4ee757efb82196df9de0f62666fac9c65228 13735092 lxd-dbgsym_5.0.2-5+deb12u4_armel.deb 3e325382eb3315a82b38f958f49c81a7d77e728d 5204724 lxd-migrate-dbgsym_5.0.2-5+deb12u4_armel.deb 1236dbaf8540639afccfd7fa3eb604229bd632e1 4394292 lxd-migrate_5.0.2-5+deb12u4_armel.deb c1149f2ccb64f8aa669b7356e5d22d3798e8af0d 10804880 lxd-tools-dbgsym_5.0.2-5+deb12u4_armel.deb d80ed46624272aeda395f9cd02126d0a7d6d86a5 8666456 lxd-tools_5.0.2-5+deb12u4_armel.deb 323b5ddcadaa7dcf3b2f011eb8ddbdf58d96432d 22371 lxd_5.0.2-5+deb12u4_armel-buildd.buildinfo d2f0069f6ef001845ca6a3af0a414eead9e4f5b9 12248056 lxd_5.0.2-5+deb12u4_armel.deb Checksums-Sha256: 12b132fc53e976d812b4bad3b0c37fda2dd01580a27fa67464fd11dc77b8c0ba 3281532 lxd-agent_5.0.2-5+deb12u4_armel.deb 15b03eca0cd823c79bba350f762636f50ffcb5eb55984ed90bf11cb620b7f8b6 4282408 lxd-client-dbgsym_5.0.2-5+deb12u4_armel.deb 14114534232afdcbdde90df5908fdf6c72a096764fd9a25f55827bf88e70e831 3904860 lxd-client_5.0.2-5+deb12u4_armel.deb ab7d691f157c2352eab2fc576e851e6183a78bb78bd817cfc7b91c57fefe9245 13735092 lxd-dbgsym_5.0.2-5+deb12u4_armel.deb a7d8c69afeec55a9da42c97320549a06714c974e8a48ca579ab8d109fa5764fe 5204724 lxd-migrate-dbgsym_5.0.2-5+deb12u4_armel.deb cf8e718a109c196b5e91328a0a006db5af454a7dac74afe17fcefa74026542d3 4394292 lxd-migrate_5.0.2-5+deb12u4_armel.deb 09ae25390c56af0b891aee1b5c4debf61f04f0a86bd719d6b36cac95034dca88 10804880 lxd-tools-dbgsym_5.0.2-5+deb12u4_armel.deb cde8b7417da8a9e9aa1e0bb546eef511672b083aef9c2f5048d830480658fbe3 8666456 lxd-tools_5.0.2-5+deb12u4_armel.deb 36876fbe37216e632005bc5112e3f38666357306f53c0d7f6df77706fb172738 22371 lxd_5.0.2-5+deb12u4_armel-buildd.buildinfo 90cf2219e0d87c7d7e56e7a76defc39c779657d0171a5b5382d7f54b6ee04653 12248056 lxd_5.0.2-5+deb12u4_armel.deb Files: d83bf7091010919157013a47d1f6713f 3281532 admin optional lxd-agent_5.0.2-5+deb12u4_armel.deb 899c9f5a6539bfff1985f83794b53a56 4282408 debug optional lxd-client-dbgsym_5.0.2-5+deb12u4_armel.deb 69c2afbbfe3fbbf0cbf0883486537bbf 3904860 admin optional lxd-client_5.0.2-5+deb12u4_armel.deb 09457d580dd13adc517003432a80e3e1 13735092 debug optional lxd-dbgsym_5.0.2-5+deb12u4_armel.deb c2b9886afbf483a4a038f623404be7fc 5204724 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u4_armel.deb 13b8a2377001fbd2775ea2d4f4c00621 4394292 admin optional lxd-migrate_5.0.2-5+deb12u4_armel.deb f1b9a28d88615e32e2d9514566f674d8 10804880 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u4_armel.deb 9e7f1cf2e8f46d676cc2a40bc28f838a 8666456 admin optional lxd-tools_5.0.2-5+deb12u4_armel.deb 391139c8134154d7c15901a664ba1b3c 22371 admin optional lxd_5.0.2-5+deb12u4_armel-buildd.buildinfo b28be3c3becf68058b56da0e07b9cc94 12248056 admin optional lxd_5.0.2-5+deb12u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENsdrABvTD8MQ0UffVza3l394K2AFAmnG7YAACgkQVza3l394 K2D1TRAAvC1j/0nwQooPOme9a22lUNJdS3krGYDuXFXbylNhlyc5xfA7K7VKLw7d SlfRtUHldCrCRD3+e438GWixVsBzC0sWHLBmIK5p3UlXf6eD1rjp9xnSlTAQcR+X EIWQwzLygMW45FmQBc9JCRe5i/FKruPkEa4RnidHt+FmeWSg+HdfvWsCpZ2R1f97 oVznKoYQGTYGm8aIeHEd7aM9mZ8MO37zbIMVZcgeev/bXPq5UiRFyooSMzT6l3lL rabxpUpsrwRx/gWMgEQc6mmXk+6Jh3ruRxXldvgmheR9KFK5P812PrsX/dQCHcq5 vlyXB4YOcJ5r5/b+qpcYG4+GricZ7TdC85BjeSADAZxySiEj0t+rOzGKrym3RFev RjH+HxTAEKCTT+rXrC4/qcdSw5chAbfdfBHPE0XMKlGkda5dDWK/5V5ajN/jWmlZ 9bRK1sx0ec4J+ZCm9gDsQYIciXyu/NZhz4s4BhUvqEkT+2FdePrh9GI1CSzv6gFT NhByOlgavG2ruIFqly8f++ec/5WJXFbW2E8KghrdmVNimPKz30Vc1VzRTXRaHtAb GHlTNHw7AzXygomNYKEtW5iQXksW97ibIlT9NF9/eHRQDQAKwFN4hEZA/lbbYpw/ daqYGnsV30oDAudPGjAVq/T9Z66I2nxeotka0Sjumwn8RMJJgZk= =OuZD -----END PGP SIGNATURE-----