-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 14 Apr 2026 19:42:37 +0000 Source: lxd Architecture: source Version: 5.0.2-5+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: Debian Go Packaging Team Changed-By: Mathias Gibbens Changes: lxd (5.0.2-5+deb12u5) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-34177 / GHSA-fm2x-c5qw-4h6f - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5 Checksums-Sha1: 72d00572dc1c5d5091a2df7105342be8f2c52b62 4006 lxd_5.0.2-5+deb12u5.dsc 79dc1d52d6e2975914114c6927807b6556161cba 3280313 lxd_5.0.2.orig.tar.gz 7f7250f506700e5047c415914dbeaedaf3cae276 32264 lxd_5.0.2-5+deb12u5.debian.tar.xz 8cc84cc80228fa70830e11406750561af72ffc19 22759 lxd_5.0.2-5+deb12u5_amd64.buildinfo Checksums-Sha256: 0db2b781dcba0ca2b26b16e2604068d30d1e405d8aaddcd840e1f949f26c69e1 4006 lxd_5.0.2-5+deb12u5.dsc 7e59ba843b43b6863b7b88076b1c15b699e7583f8ee575fe35f26ea1b7ce83a9 3280313 lxd_5.0.2.orig.tar.gz 5b300fb5ab3ca5f698898dc53516436b4470e79eac176e50766446d8a92e909d 32264 lxd_5.0.2-5+deb12u5.debian.tar.xz 923c747f08bcbcae8c1771dc73c9d977d54d9cda6deb17df6a1b98e69d39ca29 22759 lxd_5.0.2-5+deb12u5_amd64.buildinfo Files: 424ba1c1bb6e9d8babbdec13d7d9dfa7 4006 admin optional lxd_5.0.2-5+deb12u5.dsc 35087b78cebc2f758da4c84d036231d6 3280313 admin optional lxd_5.0.2.orig.tar.gz 7325ccbec2290818fc79239467e2c5ab 32264 admin optional lxd_5.0.2-5+deb12u5.debian.tar.xz 807ddecaed5994eac404a9257740d060 22759 admin optional lxd_5.0.2-5+deb12u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmnezMgSHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5ucYQALG5M1GM0r+wEBX5xdgsg9Wp+7ttGpJ6 7Xy7Rhh7H97nZ1/pk1SvhirqGaNO4x0uuXWgDK9Ui0vSj7Kgq4tpwVu4S/007R97 QS5MQcbEfuz0Q3804U6vARM539HFBrmMMyikUh73ryZt9DV6d2RfAJ/xK9f1gbVO 1oW7ySEGRDnMvSeXOUgndNPBO7QflX6eldSZuEd9NXwLsLTvWv+9kRNopX/LPX5e a6bz5QuCMVtWEB3pLxbyjMs55YXmujqqxUgF4CZrFw8J6co5NMR9rvM5Ovwq8C2U arY815CLfrg+SQdOpPtNvqi1CQbU+hP6+hejkbB/pxAfJj2BAGUSbtk59mk60a3g OtYb3lh7UI6rgzdAyPVt0OZhowvOLrJbr561acNTQT6y2mBBHlwPCAqAWl1vAh0t ixuyJLdskNSLYEv4RWc3vB36pjIcE0El/lnMPZ/SVI3MuGPHWdZulI/p8rLLMgFI gDw8iQfF4V2ee6PNgvHywVniyxlLeR0UNG69gIYLbaKgMUUVVt/yiXWf6rUwGUxr M5K7WkixUBum+o/DDwRf0s9VLtEtdzHy0nhnv7bum73xzkeAZrm20ZvMgGO2ztsv 9vt7xpY//2E/+VF1dIenwr/hfk5FqC3C+tSrHDR9vWJUytPz7NcieDg4H6r58Plg f5NBj245edM2 =N0U3 -----END PGP SIGNATURE-----