-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 23:43:38 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: s390x Version: 5.0.2-5+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (ziehrer) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r - CVE-2026-33897 / GHSA-83xr-5xxr-mh92 Checksums-Sha1: 1ad9ebda8dbf89cca6613ad5520938cf8ef458b6 3442128 lxd-agent_5.0.2-5+deb12u4_s390x.deb 534c5034ea837a4b1675f530308fde32faba82c0 4504096 lxd-client-dbgsym_5.0.2-5+deb12u4_s390x.deb 57f001a599ec018e54cfd42589369d8c2e0688d8 4081260 lxd-client_5.0.2-5+deb12u4_s390x.deb fd8572b03fafa2bd143d8101cc1d8c7cc7c9ae1b 14581080 lxd-dbgsym_5.0.2-5+deb12u4_s390x.deb 216382fe36bf96365ef4a8c0bdd8e8a23bf6b057 5464420 lxd-migrate-dbgsym_5.0.2-5+deb12u4_s390x.deb ed92f0a2c38d2dbfe91d7fff73baee134d964bda 4576740 lxd-migrate_5.0.2-5+deb12u4_s390x.deb 7d44f8bdb4eb34541da8546df1c21378b626904f 11236736 lxd-tools-dbgsym_5.0.2-5+deb12u4_s390x.deb 49797e440be8029d578a1240c37f58f664cadb82 9098008 lxd-tools_5.0.2-5+deb12u4_s390x.deb 5869710ebcf35b5d613cb230f9abe0e6022b3c4f 22417 lxd_5.0.2-5+deb12u4_s390x-buildd.buildinfo 353e6ae2ac2a00046fdde290e4a5b16ec9cd5353 12692332 lxd_5.0.2-5+deb12u4_s390x.deb Checksums-Sha256: 79ea7984219cc2f4f149becbda97d17d4557959f6a02665521934787d5422d62 3442128 lxd-agent_5.0.2-5+deb12u4_s390x.deb 19910364cef989c666bd80cd4d897e7c32e997be75803c4c6c8824bedf186a45 4504096 lxd-client-dbgsym_5.0.2-5+deb12u4_s390x.deb ceb23049800f67040e25c4c987d9ea0e97f6c1fd23d353f57fa834d733c42197 4081260 lxd-client_5.0.2-5+deb12u4_s390x.deb ae2fb098f18beed2a65db185f149c09c8132da42a2b282da998dd4c7b01e46b0 14581080 lxd-dbgsym_5.0.2-5+deb12u4_s390x.deb 6486c85cf1110d1d1d05214555a1db2b114a78f901fc7e86d4e339538ada4f4f 5464420 lxd-migrate-dbgsym_5.0.2-5+deb12u4_s390x.deb ddaeb3ff4c195001c8c536d469677e67409e860a2e0514509a358a4e539ec699 4576740 lxd-migrate_5.0.2-5+deb12u4_s390x.deb a0249bb5776655f2fd71abfb2a4d74d547d6b9f7cb468bd3c82240f873cc8ba8 11236736 lxd-tools-dbgsym_5.0.2-5+deb12u4_s390x.deb 1745aa6da0bc8452c571257b47b8af3226e1b0898f83f16a0d48a79c0e54c1b4 9098008 lxd-tools_5.0.2-5+deb12u4_s390x.deb 5031eb2a5a7caef324e72d94f6b02f23a0fb6fcf0fdc900adffe282d492af909 22417 lxd_5.0.2-5+deb12u4_s390x-buildd.buildinfo fe8f20d440867bcce63197318b9e745898c5a2d59705c972032b4df104a1935e 12692332 lxd_5.0.2-5+deb12u4_s390x.deb Files: b7869300cf875caaac709f2f00745ac4 3442128 admin optional lxd-agent_5.0.2-5+deb12u4_s390x.deb b67e03d2977128bc51b1af77b84feb58 4504096 debug optional lxd-client-dbgsym_5.0.2-5+deb12u4_s390x.deb 937bd71f99bca046c0296f66db894cd3 4081260 admin optional lxd-client_5.0.2-5+deb12u4_s390x.deb 5cba1baa5d76e68e360fc7dcb294682c 14581080 debug optional lxd-dbgsym_5.0.2-5+deb12u4_s390x.deb 66da362c99f045212899c479636944f6 5464420 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u4_s390x.deb 44bda56f28eced534b5eaeedc20f44df 4576740 admin optional lxd-migrate_5.0.2-5+deb12u4_s390x.deb 8bb66f2570a3490d8970fb9481061ae6 11236736 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u4_s390x.deb 9de65dc538c910cf34219bcb25e69aef 9098008 admin optional lxd-tools_5.0.2-5+deb12u4_s390x.deb 1d310ed54babdc7b80bbdbf21058c993 22417 admin optional lxd_5.0.2-5+deb12u4_s390x-buildd.buildinfo 50eec42d583014f1cf7c2d0b2361c4fe 12692332 admin optional lxd_5.0.2-5+deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmnG7VMACgkQMWUFebkH noTFXw//T30KC4rGBkdrITYUDNpIR7xKSbAoyouoAYSeTbWHMV5t6JvGKXK5oFKW jKR9TOVFaDu/EC/hup1fxHtjLCU1jqK/4tgQdx/cHiBP3exUVUVVlOSxwhuR1WAb 9UVlbMkaeBQ8tohT/x+dsG6nh5ZpKbDSQ04uEoMBg1yxQG2+0znMIf/VcYAVv8yr DWJv6YUZsR2o2s8OQtQDJ1hroSs3PD7Tv3FcS6Z5TaixloGDtFCu22pY61ct5AQu YYJrC0Vr+ID2b43lXDbUkvlF3X1ZVGGRDNF6yDAVGYVdjcfThwD0ozZ32wRvs8l4 15oZR0urlJ5K/V4zsU28dZ5+1Bjeyg7eZMKqz6oGV+TnYjPMOCD+Ym3cPxwmoYnp 5t+G9ZAfJ/oGwhtCapVhqdTuLv1q8xsV+aCI1as/C3wLOst1EnoBRdAhLmiY67BG SIkcA6sI6Tt+RBmXjGKZqn6nKRzkqPoc1/XPgY1uQMB1P960TOmzlIF23+yV2Qd/ JdTBdEMhFb9zXQAlesASDhoTRtJ1wrPNUSFoozggInhCjeWJZS3ccWirFqgJVIDR bV6CHpKQIeR+Qa2ijNeHAEvxGJJiSa7FdlQS3hkGbxkpEi4mhiSScWqcm9pfUeOH dIVlIH7zFviulx39qQJRAST5YYY9G22byDi4R0d9WaxiLwLdoOQ= =R4R1 -----END PGP SIGNATURE-----