-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 27 Jun 2026 17:07:59 +0000
Source: lxd
Binary: lxd lxd-agent lxd-agent-dbgsym lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym
Architecture: amd64
Version: 5.0.2+git20231211.1364ae4-9+deb13u7
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Description:
 lxd        - Powerful system container and virtual machine manager - daemon
 lxd-agent  - LXD guest agent
 lxd-client - Powerful system container and virtual machine manager - client
 lxd-migrate - LXD physical to instance migration tool
 lxd-tools  - Powerful system container and virtual machine manager - extra too
Changes:
 lxd (5.0.2+git20231211.1364ae4-9+deb13u7) trixie-security; urgency=high
 .
   * Cherry-pick fixes for the following security issues:
     - CVE-2026-9639 / GHSA-j93m-3j9p-m5m8
     - CVE-2026-9640 / GHSA-ppq7-4492-5552
     - CVE-2026-48749 / GHSA-vghh-5rfx-xhq8
     - CVE-2026-48750 / GHSA-9j25-mm2h-2f76
     - CVE-2026-48751 / GHSA-47w9-6r3f-938g
     - CVE-2026-48752 / GHSA-jpf8-86f3-wp38
     - CVE-2026-48755 / GHSA-fmc8-p6q7-75cc
     - CVE-2026-48769 / GHSA-pjff-c2wc-f6jm
     - CVE-2026-55621 / GHSA-7mr3-28h5-m5vx
     - CVE-2026-55622 / GHSA-qx75-2p3r-pwm5
Checksums-Sha1:
 0c033ed2002a1b2a62a7c8332bdeafd0eb4e959d 5985888 lxd-agent-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 52672dae0ba18afa164c6aebe434bb5f43a183cd 4631132 lxd-agent_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 0795c73c784e11b037b853a9992c74cfec8b3d76 5767376 lxd-client-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 6f913f84a62f36459f93530b02ef8de9166c754d 5287860 lxd-client_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 c0d2a8e9a085af7dadd7731fbb10895d69df0c40 17507028 lxd-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 7705961037ac26584724bb963caffe2ab96643db 6923712 lxd-migrate-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 1dbb899d8db851c8a3f4dc62754ad6c854fc04dd 5946628 lxd-migrate_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 f73daf3d145d7724f59041ccb395255cfab26a83 14357512 lxd-tools-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 b6625076d8ab4d93b528e451db9c5197949649ca 12008176 lxd-tools_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 9f74d7dbc3a660615f97764ae6c57352af9ac624 24179 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64-buildd.buildinfo
 3f08e0e0c749470a0ce5e374fa31a1c40ac8847f 15785916 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
Checksums-Sha256:
 ebf36bd059e2d0c519c5505da1ab16bddb895e27adcb8588d96f671e9f87a2a0 5985888 lxd-agent-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 22f948349a2fb83ef01591beaeed37fad38d77557295dac23dbbf18e93d4cf58 4631132 lxd-agent_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 0fa16ff65910bbf6ed7e8867fafe702087ad746d3226e0ebf28409bc678c8d9e 5767376 lxd-client-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 64ab677b1a2cfe5c0b5a39cb1ade9129d6a161d41c09ddfbc246dd8f06650df7 5287860 lxd-client_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 3b2d3250a883f3eb4f1625acbec79a1f9a194a6c08b4141ff0d1b4891a2cc4c4 17507028 lxd-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 44e0f8837c60afe0812d40f3ad353e230438016aa8a53898672b773958b711fc 6923712 lxd-migrate-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 90ce415b7e4b440d1270f571fc13955d19ef441be96971a54be5d90aa8ee8ec9 5946628 lxd-migrate_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 6f40ca0156e137026ece42e3d96aca5280b3cb592274288ee0ecfa9e25cb7861 14357512 lxd-tools-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 3c83e398e2092036c35b1a32c4746d78d57a1a965f600999c96898f3e606bdae 12008176 lxd-tools_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 dc1c6e817deed7c74cca91db4ba6fa5b25d70b0739fc63cc71142c4dac243239 24179 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64-buildd.buildinfo
 4320f6c954e73ad29e52e662ad4c700154c7845624b03510286bc20b16a6efc9 15785916 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
Files:
 6feff92e15c95bc3ffb55ceec739ac70 5985888 debug optional lxd-agent-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 2b7ddf1077acad25a77b2944c4df175f 4631132 admin optional lxd-agent_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 aecf8c1b23d4b4f4914686e52fdb363d 5767376 debug optional lxd-client-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 2358bd8a202bd9549bbe65fa05185289 5287860 admin optional lxd-client_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 f886bafa1f6329635b0a53c8e12e4078 17507028 debug optional lxd-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 773b8bb6a401af5b18b6cf5cb8be8b96 6923712 debug optional lxd-migrate-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 649a7ddd10eac426fcd7972e38fecb8b 5946628 admin optional lxd-migrate_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 23c99a9f3f8aaf601c444a566a28270b 14357512 debug optional lxd-tools-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 76e103f72a88416e92a6020f1ec56760 12008176 admin optional lxd-tools_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb
 01ac22167c165d1bf81f74eb2e567164 24179 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64-buildd.buildinfo
 ede84e119408e459da475369e63c095d 15785916 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=oFyU
-----END PGP SIGNATURE-----