-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Feb 2026 23:53:22 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: armhf Version: 5.0.2-5+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u3) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: 8510ea37a30b1126eb5b5cf2a063f11441f72e42 3273928 lxd-agent_5.0.2-5+deb12u3_armhf.deb 169fdf0105cd1d19f8036e8653411bdcec272238 4278372 lxd-client-dbgsym_5.0.2-5+deb12u3_armhf.deb d0ee7b7c5ee1be56560e7aad9c5b9615f6460501 3898520 lxd-client_5.0.2-5+deb12u3_armhf.deb dd6241622fec528d86a41f965fcd0f94e3e15f9b 13732736 lxd-dbgsym_5.0.2-5+deb12u3_armhf.deb f79d529ca4f1914ca3db27e96526b7f6659dc975 5205776 lxd-migrate-dbgsym_5.0.2-5+deb12u3_armhf.deb 55675dff280ea839a9a950ec4d916a9176639ccf 4386560 lxd-migrate_5.0.2-5+deb12u3_armhf.deb 89ebcad884368300f93694043f6d9908cfccd41b 10812320 lxd-tools-dbgsym_5.0.2-5+deb12u3_armhf.deb 7f92f400c0c17881d99116167c570befecb2b521 8645404 lxd-tools_5.0.2-5+deb12u3_armhf.deb 13ff94d92a11d55ee6e855e888890771a75e5f6d 22317 lxd_5.0.2-5+deb12u3_armhf-buildd.buildinfo cb3dcc766f6baf55696b17b1f8af63e87479a295 12226068 lxd_5.0.2-5+deb12u3_armhf.deb Checksums-Sha256: 0e9b2c38231dab45f47bffdd44f9305f9036bf217f160ed42b86a8e441adb308 3273928 lxd-agent_5.0.2-5+deb12u3_armhf.deb 22a5f5918a9b948d286ccd401bcd58f7c42f58ca86ac6da662991985a70f494b 4278372 lxd-client-dbgsym_5.0.2-5+deb12u3_armhf.deb 1b9625b5f5cdf3a0e617e88af430d82f7b13dd101a8bf41b7e32029d9320875b 3898520 lxd-client_5.0.2-5+deb12u3_armhf.deb 801d2c103aa3ea156d37fc6081fcd174e3ddb6a42d4a2d15a31fe58777d8bd51 13732736 lxd-dbgsym_5.0.2-5+deb12u3_armhf.deb b5881a89aea0fbb5c00a093a72a3809d91c28764c03f3cf12ac354bb299f74eb 5205776 lxd-migrate-dbgsym_5.0.2-5+deb12u3_armhf.deb 2fd80da8a1b96d0f0abb526296355ada5e4f3f9e176d9511085a976d50690f18 4386560 lxd-migrate_5.0.2-5+deb12u3_armhf.deb 917c171c0ad5b00b34e9a4616a66995421aa78c45cfe3b928319ec89c7c7780d 10812320 lxd-tools-dbgsym_5.0.2-5+deb12u3_armhf.deb b69225e6d4fe533795c771d11e4f46069b0cb686dd4cb154558ef7fcffb1f7a9 8645404 lxd-tools_5.0.2-5+deb12u3_armhf.deb f07d79e1cc6ef01b82ea20f9811413bc93772e81b2f85208edc5d220ab1adad1 22317 lxd_5.0.2-5+deb12u3_armhf-buildd.buildinfo 7bb8c26e04cc520ca036407f1ff961cefd1fd0f72ff7db3907d7a3b8bd43b31a 12226068 lxd_5.0.2-5+deb12u3_armhf.deb Files: 67fea05e245ad95ddf4741c0473c1d7f 3273928 admin optional lxd-agent_5.0.2-5+deb12u3_armhf.deb 4ac3bddec673f54d4d2fe041a0d45c33 4278372 debug optional lxd-client-dbgsym_5.0.2-5+deb12u3_armhf.deb b629092422d3d3152f6a10a7ab224295 3898520 admin optional lxd-client_5.0.2-5+deb12u3_armhf.deb 59e71c9c3c2a979feafd0e27b639e752 13732736 debug optional lxd-dbgsym_5.0.2-5+deb12u3_armhf.deb a60499ce7f4072dd2b071a71598c9d62 5205776 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u3_armhf.deb 9f9e684587d40a296fcb63fac733bcfa 4386560 admin optional lxd-migrate_5.0.2-5+deb12u3_armhf.deb f1a144629ed341328e45d4b7b624701a 10812320 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u3_armhf.deb 0f8a6cb91472107137a474663d63e540 8645404 admin optional lxd-tools_5.0.2-5+deb12u3_armhf.deb 129206c76340f2f0d549f2248199ded3 22317 admin optional lxd_5.0.2-5+deb12u3_armhf-buildd.buildinfo 2ef229e814c83d607d3044ab9cf13188 12226068 admin optional lxd_5.0.2-5+deb12u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEiIG3Q3DxwDgRKKeyLRECdjCZQkcFAmmjLDIACgkQLRECdjCZ QkdwRxAAoOXBBDT9dv/2yhHx+XP8k82hnLoSi1EQLOKRWxyoQBDu8M44p0AKoaSG h+0RwC42kz39LCEFxPkHJrVwhjyY02/5JVWkCz+drSGN5Pg2cZG5DqbgHuZU6uKy UwPWW4ocxf2O9YHA+D4jmuZTRrkXTowpXzord50uZRpdloHfOMNQvWtLwgiYjFIf KojOn4jKI+1Q21d3U/XxHoa5y435djqc99Zvv1EVU7627YPI2XNrj0kH8bwarUG+ cFNtCBG7O5FqPEHR+pNP94+T/3LnntsWvGkUCG7WGFzE7Nd2azw0byhvesqNdeXY UWbsF3JayyqYqMPq7AJeKeXBKhAtqyWnLoD/fM3Iw71in3M23SW2gYs+b6BwRCb5 om/hgmCj7hxYA9uXpUJPwHDjIuT55xftp7ORJs8FOPxbz83RZ8jVpbU4s+cSi1Gx R/3lFz91J3iAzvxkbuDhpXAK9T7AoiD2Z2A4svDWZgjq5KcuDWX9uiHhDwl390g9 APDpQrnwwCjGPXJMWPPNiwWazbQGzIDrvgcEC5RO2y2eTk506wiJBpdlMVm313sP 9w9TW7US0eAr8rwkNqgZoPjPHn1wbgg1KOaQWOUlFXMn3n8OTnK0OKxH9tCjlVDF feFqY5E2DOtYHiz+7JL7IXm7TGoXBwUPtqRNuM0mTPDhAtIQNFs= =oMDb -----END PGP SIGNATURE-----