-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 14 Apr 2026 19:42:37 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: amd64
Version: 5.0.2-5+deb12u5
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u5) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-34177 / GHSA-fm2x-c5qw-4h6f
     - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5
Checksums-Sha1:
 4243c00c9fe82afce596916df05da9f174c0ff50 3802768 lxd-agent_5.0.2-5+deb12u5_amd64.deb
 e2996f14ffb47a4c790da1a137fc11e863a1db69 4571452 lxd-client-dbgsym_5.0.2-5+deb12u5_amd64.deb
 af84d9220076d5d153e7dfe35e8f473d1b6426b4 4493028 lxd-client_5.0.2-5+deb12u5_amd64.deb
 0a5057cf500c3bfbba98c116b462cba6200e33da 14759424 lxd-dbgsym_5.0.2-5+deb12u5_amd64.deb
 ce30e6e1d3d44596ed476bff13cb346f5b001174 5561024 lxd-migrate-dbgsym_5.0.2-5+deb12u5_amd64.deb
 9e41170a254247b5106f33164dd5b39a634bc8d3 5054612 lxd-migrate_5.0.2-5+deb12u5_amd64.deb
 52ba35c49a03c872d45a686b030f13bb10e665b0 11447832 lxd-tools-dbgsym_5.0.2-5+deb12u5_amd64.deb
 73882b01c26ba9ac0ebc39e602a232d07c7db781 10037060 lxd-tools_5.0.2-5+deb12u5_amd64.deb
 2c56338a810cf30f691a79bd15210232999611b0 22533 lxd_5.0.2-5+deb12u5_amd64-buildd.buildinfo
 e491f9f1c844e846b46aa6cc3f6677e0825fc758 14038832 lxd_5.0.2-5+deb12u5_amd64.deb
Checksums-Sha256:
 f3e73782fef010077771eb7e0aac877dfef633db3832d7cd4103b9da353f8085 3802768 lxd-agent_5.0.2-5+deb12u5_amd64.deb
 cfe2f19625164f53124cbf84be7f9b8fbac16888a09a32bd9116195b0235c779 4571452 lxd-client-dbgsym_5.0.2-5+deb12u5_amd64.deb
 0fb56fe776fee10a18f63a65946f4ab8b77e5b5739caf2ef80fe0659e52e6fc0 4493028 lxd-client_5.0.2-5+deb12u5_amd64.deb
 99eec6379ec506fa16e234fa2c52d00779cc1d572d849b047c3153c9148f28ea 14759424 lxd-dbgsym_5.0.2-5+deb12u5_amd64.deb
 280c3e02566e05f012cfd3a77fc9c037c3db889315839e5df00dadf835cc518a 5561024 lxd-migrate-dbgsym_5.0.2-5+deb12u5_amd64.deb
 3a7504d441a07245a25299fd72dc541b28a8a35738061f8f007f5359ed2dfa85 5054612 lxd-migrate_5.0.2-5+deb12u5_amd64.deb
 c084e1967187d0b9984fa5ef0f54376f390be6ad843825a179d4c50b920b3d10 11447832 lxd-tools-dbgsym_5.0.2-5+deb12u5_amd64.deb
 daf14828e94a89ee0b681d5e2732445c9a584a2209ca2359175510aa16f3f59e 10037060 lxd-tools_5.0.2-5+deb12u5_amd64.deb
 79b8586d958e5b988e998ba46850b1c6800c5f1c3e06bf77fb6ace6fb06c47dc 22533 lxd_5.0.2-5+deb12u5_amd64-buildd.buildinfo
 981d2e7d858bea1af068b5d266f7796b28ad331c7d169cd0d461073b1475ef77 14038832 lxd_5.0.2-5+deb12u5_amd64.deb
Files:
 6aa6e248d6ef12992fa12fbe724c1903 3802768 admin optional lxd-agent_5.0.2-5+deb12u5_amd64.deb
 866bd8bdee2b77b4c2297f54307de684 4571452 debug optional lxd-client-dbgsym_5.0.2-5+deb12u5_amd64.deb
 25bb85833d61be6e4d400777f7f9e1ed 4493028 admin optional lxd-client_5.0.2-5+deb12u5_amd64.deb
 879cb9e74bbdb17fecab91322d057d91 14759424 debug optional lxd-dbgsym_5.0.2-5+deb12u5_amd64.deb
 3a613e4978d7849147265059491ade2d 5561024 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u5_amd64.deb
 7ea37123101475deb3c3bc528384498b 5054612 admin optional lxd-migrate_5.0.2-5+deb12u5_amd64.deb
 4bd73f5e3907b0eb3e9f58723191ce81 11447832 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u5_amd64.deb
 725a46e6b5d10611104967dbbd53fca2 10037060 admin optional lxd-tools_5.0.2-5+deb12u5_amd64.deb
 d0db57cb290d5439f58083455e222bec 22533 admin optional lxd_5.0.2-5+deb12u5_amd64-buildd.buildinfo
 6cfcf56bd3f0913a4dba597bd1d110b4 14038832 admin optional lxd_5.0.2-5+deb12u5_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=y4vq
-----END PGP SIGNATURE-----