-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 23:43:38 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: armhf
Version: 5.0.2-5+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
     - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
     - CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
 fe493262de60f5a2a2245eae2482d39a77c582fd 3274584 lxd-agent_5.0.2-5+deb12u4_armhf.deb
 d34e5c90d5c0ca137a01b91df4d8717c2aa22194 4281796 lxd-client-dbgsym_5.0.2-5+deb12u4_armhf.deb
 2596bbea25e5afaff36eb542ed93f0389eadf010 3897716 lxd-client_5.0.2-5+deb12u4_armhf.deb
 cb53bf5e5b4bff33112977f050379063d9cbd189 13731916 lxd-dbgsym_5.0.2-5+deb12u4_armhf.deb
 6d8201af3d7ee4482247366cf508350de2223282 5206124 lxd-migrate-dbgsym_5.0.2-5+deb12u4_armhf.deb
 787010398545aea6e706e71042ae6f3d2601bed1 4386532 lxd-migrate_5.0.2-5+deb12u4_armhf.deb
 4f25eae114b93346a8810333b4182de9dab29959 10805768 lxd-tools-dbgsym_5.0.2-5+deb12u4_armhf.deb
 77076b6b5603cdba0a37bb09dd863c20cf63c6ff 8646076 lxd-tools_5.0.2-5+deb12u4_armhf.deb
 203e5f9769e96ac277a2dd00a0c6b400cbb11df4 22373 lxd_5.0.2-5+deb12u4_armhf-buildd.buildinfo
 d033fa9c8f93b9e02822496aba544ada11ba65f5 12223068 lxd_5.0.2-5+deb12u4_armhf.deb
Checksums-Sha256:
 b2aac2a67a2ffbdc367417bc136c2e252b2ac85fe6a5fdcabe942cbc60a505b7 3274584 lxd-agent_5.0.2-5+deb12u4_armhf.deb
 7a1e9c1c8ffc2c91b30541aca3700268e263c6e242cecf08663614672e206455 4281796 lxd-client-dbgsym_5.0.2-5+deb12u4_armhf.deb
 5a015a7e14867ea2b76dda2177619d4291d68a7e75614f8d3282418411097657 3897716 lxd-client_5.0.2-5+deb12u4_armhf.deb
 7212049b4f0b995f42a7fa019f4bcf517ea7ac1e799fb7b0016d600625d1d49a 13731916 lxd-dbgsym_5.0.2-5+deb12u4_armhf.deb
 1e5070502fab1db248569c8ca846ce196d633048fe172abc128616474dcf7235 5206124 lxd-migrate-dbgsym_5.0.2-5+deb12u4_armhf.deb
 8ef0c3013527370535752a9a2302d989c5ec89b9f1e377a7f0c84610df3d1e9f 4386532 lxd-migrate_5.0.2-5+deb12u4_armhf.deb
 6a8b5a8257c3c972e53f20269ef63e27f12227bb1e2621ce9eac5099ac223ac6 10805768 lxd-tools-dbgsym_5.0.2-5+deb12u4_armhf.deb
 d85aca1be22f65773c8b99157c3b74fbdc29d6750c69201fd1e10c8e87930698 8646076 lxd-tools_5.0.2-5+deb12u4_armhf.deb
 05fc793a0e8cec44d71ec9b7e43fd7cd89d14c090c0b7d1648b5682c98931e25 22373 lxd_5.0.2-5+deb12u4_armhf-buildd.buildinfo
 c25623908357a4bce998dea471af31c8ed89795d387f2119cb17eca9d1873bc4 12223068 lxd_5.0.2-5+deb12u4_armhf.deb
Files:
 1d7d5091e629d45d9268cfb9d7d49767 3274584 admin optional lxd-agent_5.0.2-5+deb12u4_armhf.deb
 9504593adb173fcbf97ad7996f34126d 4281796 debug optional lxd-client-dbgsym_5.0.2-5+deb12u4_armhf.deb
 b6ecc7c87a266620670bcd32821d7bce 3897716 admin optional lxd-client_5.0.2-5+deb12u4_armhf.deb
 871019f7b36afc647082305f2dc654fc 13731916 debug optional lxd-dbgsym_5.0.2-5+deb12u4_armhf.deb
 75c2c229734ad70a010664de11c2b9cd 5206124 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u4_armhf.deb
 83eb35c00c8bd5fa975aa3e453e70ffb 4386532 admin optional lxd-migrate_5.0.2-5+deb12u4_armhf.deb
 a46b84eeb9892166bed889812800b053 10805768 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u4_armhf.deb
 1e22ce8390015f78bb54bfef6d38f0fe 8646076 admin optional lxd-tools_5.0.2-5+deb12u4_armhf.deb
 64ce1302359e8d8e39702f125d800619 22373 admin optional lxd_5.0.2-5+deb12u4_armhf-buildd.buildinfo
 be22a6378311f1c43a0dca31a386751d 12223068 admin optional lxd_5.0.2-5+deb12u4_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=bQeo
-----END PGP SIGNATURE-----