-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Nov 2025 16:07:42 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: amd64 Version: 5.0.2-5+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u2) bookworm-security; urgency=high . * Cherry-pick upstream fix for CVE-2025-64507 / GHSA-56mx-8g9f-5crf Checksums-Sha1: 653bc8a6872116e9b232b424d40838e7024f8cc5 3800028 lxd-agent_5.0.2-5+deb12u2_amd64.deb f221d44261b5547fbb559ba0ed8ec9c9212dbe03 4571656 lxd-client-dbgsym_5.0.2-5+deb12u2_amd64.deb 31c7d03fef95c1acf1276ef2a65b52d4fa210255 4491912 lxd-client_5.0.2-5+deb12u2_amd64.deb 0ab51d34116845504a0726fa4c6e9c888f1dc5b7 14685036 lxd-dbgsym_5.0.2-5+deb12u2_amd64.deb a5db196d4aba3234f4b31fc07a062a0e3114ef09 5559160 lxd-migrate-dbgsym_5.0.2-5+deb12u2_amd64.deb 856f1e5a89f1ed60d621d3231f9818a8365041eb 5057268 lxd-migrate_5.0.2-5+deb12u2_amd64.deb 0d7e3867b9715edfa921e023322eebcbeca48921 11440396 lxd-tools-dbgsym_5.0.2-5+deb12u2_amd64.deb 753c0b91b4ff31cf7725d9c6b375754c1f0f1072 10037012 lxd-tools_5.0.2-5+deb12u2_amd64.deb c83e4c92f8ddb2c920cad7d559568280ea8c368f 22476 lxd_5.0.2-5+deb12u2_amd64-buildd.buildinfo ed32ba14534003d230b737da4f2114b35a7beb3e 14034024 lxd_5.0.2-5+deb12u2_amd64.deb Checksums-Sha256: fbed973e80a61b52f02e8a5aaf843ff1931d85f19b5249fc70832350c0a638a4 3800028 lxd-agent_5.0.2-5+deb12u2_amd64.deb e23d91f12383f52ee9ed1006cb59531c66d00f183fa16f6838e6f7f079ae65b8 4571656 lxd-client-dbgsym_5.0.2-5+deb12u2_amd64.deb f6d9308d1ae33b2537cfa756a059ece92ec6e01bf07a5c4f6b6ba042587259de 4491912 lxd-client_5.0.2-5+deb12u2_amd64.deb d1c9f0298ccd1bc936c96d43ca0eabfd17cc8a9d6734d6ed95cd8c3dab7a6816 14685036 lxd-dbgsym_5.0.2-5+deb12u2_amd64.deb f76726819ca942b41e3f199f626d98f1b7b2823adac60767e288adaa5da934a4 5559160 lxd-migrate-dbgsym_5.0.2-5+deb12u2_amd64.deb 9a53b260f1c687c882c9ebfce3523c3a4eec945fa4b1fa0030e01c28ea161646 5057268 lxd-migrate_5.0.2-5+deb12u2_amd64.deb ce880e1bddc5f87eb4f112088524fba38989ba48fc0bf8022d4163043c763e7c 11440396 lxd-tools-dbgsym_5.0.2-5+deb12u2_amd64.deb 9de4afce1fbfd9c79754f42636e47ee265b60ef437f02ec70427ee705eff7ac9 10037012 lxd-tools_5.0.2-5+deb12u2_amd64.deb 324f3fb0389ba5805101271acd77e0910545461ec0caa0e96f7cf176f43ab1cc 22476 lxd_5.0.2-5+deb12u2_amd64-buildd.buildinfo 4fe800b4bb54b2ac547ba1d49110d16b0cdb1bc86490ede4ff71737e0b76f114 14034024 lxd_5.0.2-5+deb12u2_amd64.deb Files: 2d2da66555b050c247fce9c4a6e3c4b0 3800028 admin optional lxd-agent_5.0.2-5+deb12u2_amd64.deb 379c5ee65f2d494848ad2d3eb752e053 4571656 debug optional lxd-client-dbgsym_5.0.2-5+deb12u2_amd64.deb f62f9b578228bb0207ce10d88d62418a 4491912 admin optional lxd-client_5.0.2-5+deb12u2_amd64.deb 9d6d4cda3747b789d5d93bb8cedfc1de 14685036 debug optional lxd-dbgsym_5.0.2-5+deb12u2_amd64.deb b88ad7f9a9c565625584be262ddc051c 5559160 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u2_amd64.deb 8cedb1bb0e38247f156de831055414c6 5057268 admin optional lxd-migrate_5.0.2-5+deb12u2_amd64.deb ef62bb29457426bb925955a84d0c0edf 11440396 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u2_amd64.deb f3edc453e44145161990597f4b084647 10037012 admin optional lxd-tools_5.0.2-5+deb12u2_amd64.deb 7e1638f9756dfd88118adfe857b6b730 22476 admin optional lxd_5.0.2-5+deb12u2_amd64-buildd.buildinfo 736656496c44e358067e18c9c8df34f9 14034024 admin optional lxd_5.0.2-5+deb12u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmkTk10ACgkQJuP6X4A0 XeK0SRAA0lgLeP1MM1TQohK+eRRxgDDkUxEd1DuMad/WcoX5RmL0nyMiI0xeZp0v Logv81CZ3/C0Mgc3GQ/tRiyTD3JQ1QDvy0nJkCvikYsVUSvoPhj+VbcdUq7vKyNU s8zCt3vsfpM47EgpgU4FoA29NnP6moHQfRX1PNr+WOSlmyVeOyj36ZgX8Uk4l5gB HkmlkbXe8/GpBcoBU/fSm08k0HbcA7QhnlqyJI1nJsEvAd7pQBGn1tPs/KA+MSpn pf+Ez6BWGCBSYTCAvCOm/CVmAAWenBP1WlKRwH6xXPgVGSgCXLgiaui7hmbFSme+ VhTMx80uJS1XVtJ2TZkGlCUlOJOeLBSnH6ZjPw1OGPmzJcai0BgbVg7GwRD7sxxu 63eYWRI/tl6+80NQHYINhaKhO+5DRPJnJLWk3bbPhLuKIZ8/SqC/jeXAFw8fJ8Qw H4d2y1PwtcRN6oOnBRonUPRX/ozca+WuMnJV2zH6uR9uzBq8Co8AfRN0dvh3C62i zhaMAYC0xHMGS3CMgoom1iHATB1flR0O8TEc93G2qffd5G1NQWcSl7KdUWc+Y9iS tD0ge9+kDrHJFkgUswh9eHwwCaC/LrdD9J6Oa2sLSafevsDRZvYV9PI/Ryb/xt7u 6Ik/T85COVEURS5AfSxVhP5V8PXfD3TEctTBEuxjRIo0IjZ3tcg= =iGpB -----END PGP SIGNATURE-----