-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 27 Feb 2026 23:53:22 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: amd64
Version: 5.0.2-5+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u3) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-23953 / GHSA-x6jc-phwx-hp32
     - CVE-2026-23954 / GHSA-7f67-crqm-jgh7
Checksums-Sha1:
 5805fa6b516d42473137ab1d839634e7b6eb9fbc 3801020 lxd-agent_5.0.2-5+deb12u3_amd64.deb
 8bebd1f2ce40200f90f18f9f492b40f06c97ca8c 4571616 lxd-client-dbgsym_5.0.2-5+deb12u3_amd64.deb
 62067a1e2f7f42853a0ce493a7e06b152aad5baa 4494096 lxd-client_5.0.2-5+deb12u3_amd64.deb
 1a5a82492f9f8826f6618292041fbcbb2cfaf998 14763204 lxd-dbgsym_5.0.2-5+deb12u3_amd64.deb
 4667d2e0e7db52d5848a1d9565da75290880f271 5559164 lxd-migrate-dbgsym_5.0.2-5+deb12u3_amd64.deb
 7d376554eb481eb77d346d89023e28bc02d56c89 5058200 lxd-migrate_5.0.2-5+deb12u3_amd64.deb
 2758055da06890aadd8ecbeb2e6b9e91405c9127 11445660 lxd-tools-dbgsym_5.0.2-5+deb12u3_amd64.deb
 a1f89b3f872c7a829e335a3989f241456235432a 10040676 lxd-tools_5.0.2-5+deb12u3_amd64.deb
 7de29cd57fc49989119bd74da148a46f22192634 22477 lxd_5.0.2-5+deb12u3_amd64-buildd.buildinfo
 ff9235e787a793435b68014ceb74329ad9abe1f4 14033448 lxd_5.0.2-5+deb12u3_amd64.deb
Checksums-Sha256:
 73d0a7abdf5695b95e920ceda3363f836686981783f0f5d5ee6a2669a0068492 3801020 lxd-agent_5.0.2-5+deb12u3_amd64.deb
 1b50ac0648eec705cd5dda08ff8e1590ed517456f940be21046a0b7663dc38be 4571616 lxd-client-dbgsym_5.0.2-5+deb12u3_amd64.deb
 5a41d4c807ef37b1b7d980e855d6eb49aea6901f82f2407cd084d2abc4a8ff5f 4494096 lxd-client_5.0.2-5+deb12u3_amd64.deb
 c129fccf484dd4c3bac252f6ec8a298ca84a34b322cea358a1d4388636c81123 14763204 lxd-dbgsym_5.0.2-5+deb12u3_amd64.deb
 22458bdbc96a856671fb58af999735e94d48ded6e006d5c9f9327312d8d71f22 5559164 lxd-migrate-dbgsym_5.0.2-5+deb12u3_amd64.deb
 8fa035f2a17a05e5fc815f6ee758eb83581563761074b4324885415da11ffe40 5058200 lxd-migrate_5.0.2-5+deb12u3_amd64.deb
 739d6bd727511e8efda4601c6ded295036df7e40f0f81bf8fd933c1834fc8ab0 11445660 lxd-tools-dbgsym_5.0.2-5+deb12u3_amd64.deb
 2e032409df81091f90735c5187a37910eea4130c5fd1bea23e368224d0ebde91 10040676 lxd-tools_5.0.2-5+deb12u3_amd64.deb
 a6f6b18aa92b47569e104e3bd05b7c6a6aedf6c188de8046e6a2afd59c3f2721 22477 lxd_5.0.2-5+deb12u3_amd64-buildd.buildinfo
 36c701f99476218eb21bb5e5334568247bb37a4e81fb4eb9899e51b6cc140948 14033448 lxd_5.0.2-5+deb12u3_amd64.deb
Files:
 2bb80b57282ac0dd5fa141847e98bd3d 3801020 admin optional lxd-agent_5.0.2-5+deb12u3_amd64.deb
 7eb359a498a4c55afad10a1cb2c24691 4571616 debug optional lxd-client-dbgsym_5.0.2-5+deb12u3_amd64.deb
 0d14253f6fe3ae32742b95877075def0 4494096 admin optional lxd-client_5.0.2-5+deb12u3_amd64.deb
 9db6a034a33ca4eca0364d2816ca53d5 14763204 debug optional lxd-dbgsym_5.0.2-5+deb12u3_amd64.deb
 1c3071dae8cd796209f6035f108c7188 5559164 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u3_amd64.deb
 079eea292490b47a27129d402096efa3 5058200 admin optional lxd-migrate_5.0.2-5+deb12u3_amd64.deb
 2b071c2452ae7d21c6425ca4a2e209f1 11445660 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u3_amd64.deb
 68ca37f9aaa0b169abdc89f3e81ce759 10040676 admin optional lxd-tools_5.0.2-5+deb12u3_amd64.deb
 6ce06943802fb958eeb37874346654a0 22477 admin optional lxd_5.0.2-5+deb12u3_amd64-buildd.buildinfo
 a0595bd0a4381a71ecd4a6985b774104 14033448 admin optional lxd_5.0.2-5+deb12u3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=Hpll
-----END PGP SIGNATURE-----