-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Mar 2026 23:43:38 +0000
Source: lxd
Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: i386
Version: 5.0.2-5+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
     - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
     - CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
 06176ad1a826256fbbe71f010719a9540f47f499 3565436 lxd-agent_5.0.2-5+deb12u4_i386.deb
 85833af23243400424361d1c4291094bd68372e5 4665144 lxd-client-dbgsym_5.0.2-5+deb12u4_i386.deb
 e80bcd963620b4d97914d28847378c2fada0b2eb 4225296 lxd-client_5.0.2-5+deb12u4_i386.deb
 760b482946c19323e6cb868fe6c36cac918bd0d7 14861160 lxd-dbgsym_5.0.2-5+deb12u4_i386.deb
 2e93920fd84316519c80f30a3b1ed4eea7c4da0f 5625880 lxd-migrate-dbgsym_5.0.2-5+deb12u4_i386.deb
 78ac4db945ed4410d3819fe90358f8516ee830f0 4741288 lxd-migrate_5.0.2-5+deb12u4_i386.deb
 d189782ac247d6f8be9a228655948f745cb89540 11724720 lxd-tools-dbgsym_5.0.2-5+deb12u4_i386.deb
 5015981695411723835c17f23403d75bab0cc66b 9423492 lxd-tools_5.0.2-5+deb12u4_i386.deb
 46b9599b7c3ab8b59f1ec0e66e6d9efc45499d9e 22433 lxd_5.0.2-5+deb12u4_i386-buildd.buildinfo
 c8936d19778aa6adec0d2d6ed96ed51ec2ab9063 13145316 lxd_5.0.2-5+deb12u4_i386.deb
Checksums-Sha256:
 238ef30df736731962e4bd75abc36c4d2af82d8a7c7bea33c76d8dcb1eb62405 3565436 lxd-agent_5.0.2-5+deb12u4_i386.deb
 8e8d5f6855697c1099ef74b135dd4a13cc8bfc6ed99550dbfaf9171fff44fa75 4665144 lxd-client-dbgsym_5.0.2-5+deb12u4_i386.deb
 5274332fb18b3259ecedf9d55ec9dc0b3e50c5ac267d6ddbad8f4b2a1d838da9 4225296 lxd-client_5.0.2-5+deb12u4_i386.deb
 b3134897b855c899b8acb6d4f5fc5d378fac7349b8916d12ec600eaea5bb1ee1 14861160 lxd-dbgsym_5.0.2-5+deb12u4_i386.deb
 a2890b6f09ef921aa437bd5fb8c16a0bec609b0f12008cc151aff8b849a4fb57 5625880 lxd-migrate-dbgsym_5.0.2-5+deb12u4_i386.deb
 54820cd85cb6fac52019dfcab89f98092cdd7157629bc2b36f4932cbbf576ec5 4741288 lxd-migrate_5.0.2-5+deb12u4_i386.deb
 f7a58f63abc9401f5ed955e4d85461901f9baf03d695c6d067da79ad1b3a7905 11724720 lxd-tools-dbgsym_5.0.2-5+deb12u4_i386.deb
 2d034553bd6ec5cf2ae9a03c223f5ca2f46c1b0801a8a4ea52bec8e9b39b00fc 9423492 lxd-tools_5.0.2-5+deb12u4_i386.deb
 928c5b1c62d84ae6fad28fc0f51e123c5ed0dd8546244fcf56ab8a64109009e2 22433 lxd_5.0.2-5+deb12u4_i386-buildd.buildinfo
 41d38298df11a3127a96be2185572bec3405b387724f2fb25887e16c9ff83819 13145316 lxd_5.0.2-5+deb12u4_i386.deb
Files:
 d3a23a3570428a56df5c0c4eedcfb38a 3565436 admin optional lxd-agent_5.0.2-5+deb12u4_i386.deb
 1abf589ce9eafd57d72bc359a9e80816 4665144 debug optional lxd-client-dbgsym_5.0.2-5+deb12u4_i386.deb
 b249b1c35b30c5b8c32f6dc0617e6586 4225296 admin optional lxd-client_5.0.2-5+deb12u4_i386.deb
 8f55efc6021bee0f475ba3b2ec5f42c8 14861160 debug optional lxd-dbgsym_5.0.2-5+deb12u4_i386.deb
 5fe9c9b43888a731d020fa97622dd231 5625880 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u4_i386.deb
 05b35cbc8bc26b3232f57907ebed4f72 4741288 admin optional lxd-migrate_5.0.2-5+deb12u4_i386.deb
 38e94b213b2388554e62e2e246701b82 11724720 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u4_i386.deb
 2245712273125b1bf769058115f1cb73 9423492 admin optional lxd-tools_5.0.2-5+deb12u4_i386.deb
 228e5989f3786d2b0963743850db2f27 22433 admin optional lxd_5.0.2-5+deb12u4_i386-buildd.buildinfo
 7f7dfa94c0cbeff497a2bb2ed44b086a 13145316 admin optional lxd_5.0.2-5+deb12u4_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Kj/I
-----END PGP SIGNATURE-----