-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 23:43:38 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: amd64
Version: 5.0.2-5+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
     - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
     - CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
 cd9d6024cf850b94603d3434c3dfb2882b680258 3801592 lxd-agent_5.0.2-5+deb12u4_amd64.deb
 171030655a9c74cd292295116d0e5e7f9ab2e0a2 4571452 lxd-client-dbgsym_5.0.2-5+deb12u4_amd64.deb
 48215ac2d789f47416a73bcfe3bc92990bcd0a05 4494480 lxd-client_5.0.2-5+deb12u4_amd64.deb
 b72a0bb1a4c8578c7119c8f75fb015e48b3e89ee 14759532 lxd-dbgsym_5.0.2-5+deb12u4_amd64.deb
 3bb0beb8753cd84cd1fd3b72492a2b864a8fb95a 5561128 lxd-migrate-dbgsym_5.0.2-5+deb12u4_amd64.deb
 532f38840a5d16480ca272df4130cadd1b585f26 5054556 lxd-migrate_5.0.2-5+deb12u4_amd64.deb
 2881fac3523a9149e2dcb16e34ad4f5d306fa8af 11447816 lxd-tools-dbgsym_5.0.2-5+deb12u4_amd64.deb
 87f221fac73e4650e4b2d754b6ab033144d3a706 10035308 lxd-tools_5.0.2-5+deb12u4_amd64.deb
 a9eb259579810d4bf611625c5254ce8cd9004fa3 22533 lxd_5.0.2-5+deb12u4_amd64-buildd.buildinfo
 28e75914ac23e1ab5eb149ef6b5a568af8100831 14038300 lxd_5.0.2-5+deb12u4_amd64.deb
Checksums-Sha256:
 1e8b383a04649a87655d24633bc5c6364e1d79342b515c5890246337b1966fd7 3801592 lxd-agent_5.0.2-5+deb12u4_amd64.deb
 4e66773a4089591ff1080debd3ed9728288a2a0940f7eeb2e29f3c3b3d54b187 4571452 lxd-client-dbgsym_5.0.2-5+deb12u4_amd64.deb
 61ff77d10e062880563017be3be0f7c06e41028aecc0db866b65e579a0be4551 4494480 lxd-client_5.0.2-5+deb12u4_amd64.deb
 4f62d344528f79a54cff8f1bb596aed346e6c3e2d43a1af23ddcb8d308ddca86 14759532 lxd-dbgsym_5.0.2-5+deb12u4_amd64.deb
 02dc066ba02bcf3b50253c5f1bbb18f5410c73f85763e90942f2719b158f715f 5561128 lxd-migrate-dbgsym_5.0.2-5+deb12u4_amd64.deb
 1e109098484655825ccdc02740c9703f125659e7ca433f691a8c85e0525fa6dd 5054556 lxd-migrate_5.0.2-5+deb12u4_amd64.deb
 95b60d06af45b1723c0d7f8c49b40aae621d0e76601aeda591dbfd18d1e06d49 11447816 lxd-tools-dbgsym_5.0.2-5+deb12u4_amd64.deb
 70ec116d41a4c3e1568b2f27aa8cb9dccd8fe175f5bb2f3378f5e0b25248ac59 10035308 lxd-tools_5.0.2-5+deb12u4_amd64.deb
 151d61b6c3106216946ac129e18e4ff516a3118aabb34f02e437b276e7ce0569 22533 lxd_5.0.2-5+deb12u4_amd64-buildd.buildinfo
 8a8e9536406622e97424785b82863319506c454a70520abd7aa23c767c72911c 14038300 lxd_5.0.2-5+deb12u4_amd64.deb
Files:
 2bbacb2b2d9f5bfe0d9a3b556231a222 3801592 admin optional lxd-agent_5.0.2-5+deb12u4_amd64.deb
 80f65b2be465626df581ab7656cb105e 4571452 debug optional lxd-client-dbgsym_5.0.2-5+deb12u4_amd64.deb
 42cb2511990bb0abad2eeb42d85b327b 4494480 admin optional lxd-client_5.0.2-5+deb12u4_amd64.deb
 cce6cec1babcaff719d95a0efdada57d 14759532 debug optional lxd-dbgsym_5.0.2-5+deb12u4_amd64.deb
 61ab75e2a2f721f60e98899a99b96017 5561128 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u4_amd64.deb
 eb77b12f7bfa1a8fb11e4b2bd69b0c81 5054556 admin optional lxd-migrate_5.0.2-5+deb12u4_amd64.deb
 8f6c7c54520207c48f06157f53fc9605 11447816 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u4_amd64.deb
 2e6253c6b900d325113d77da48994c81 10035308 admin optional lxd-tools_5.0.2-5+deb12u4_amd64.deb
 a32a055e41ad9393f5fc56d4faecda36 22533 admin optional lxd_5.0.2-5+deb12u4_amd64-buildd.buildinfo
 5d09ceb092c51d7e8760850113b5e4d5 14038300 admin optional lxd_5.0.2-5+deb12u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=/qT/
-----END PGP SIGNATURE-----