-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Jun 2026 17:07:59 +0000 Source: lxd Binary: lxd lxd-agent lxd-agent-dbgsym lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: riscv64 Version: 5.0.2+git20231211.1364ae4-9+deb13u7 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-01) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2+git20231211.1364ae4-9+deb13u7) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-9639 / GHSA-j93m-3j9p-m5m8 - CVE-2026-9640 / GHSA-ppq7-4492-5552 - CVE-2026-48749 / GHSA-vghh-5rfx-xhq8 - CVE-2026-48750 / GHSA-9j25-mm2h-2f76 - CVE-2026-48751 / GHSA-47w9-6r3f-938g - CVE-2026-48752 / GHSA-jpf8-86f3-wp38 - CVE-2026-48755 / GHSA-fmc8-p6q7-75cc - CVE-2026-48769 / GHSA-pjff-c2wc-f6jm - CVE-2026-55621 / GHSA-7mr3-28h5-m5vx - CVE-2026-55622 / GHSA-qx75-2p3r-pwm5 Checksums-Sha1: 84faa9fe0a9881c7ee63e18bb6938e5e787adb0e 5806104 lxd-agent-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 5ce3d47bb85fa8624e493267fd0c9d6567739492 4082076 lxd-agent_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 20cd08bb3b32686671c540cad2598aa8aa8fe4ba 5481088 lxd-client-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 340025dca580728f194bac696b50483beb5c1040 4694056 lxd-client_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb c0ff5216cffd9e13cdd962af099d8e3a416b831c 16680928 lxd-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb bd6e424ce0e5fcec72302e7f303272a02a2e5af0 6606048 lxd-migrate-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 8afb9c9eb0b6b2f1e8ff536a23019db48322a144 5279200 lxd-migrate_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 30b46cda06b03850fb5652c43a2ec6fb69ac512e 13723832 lxd-tools-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 1d08c5abd2b71c1ccaf22665987cbbe44443edc3 10597312 lxd-tools_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 9976198a080c546f3a3375af37ff82ff9abd6c34 24200 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64-buildd.buildinfo e1b7e33c08706f254f2278cc7bb9632ebee3c544 13991036 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb Checksums-Sha256: 8ba1d38686dbe0f0369dceb0041c7159a606f6743d1c536d2bcad696256386f3 5806104 lxd-agent-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 9924d3b98d85a98565ed2f0788fda9324cbecae27b5370b0ff38971dfce1641b 4082076 lxd-agent_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 137f5ca01384a982ef60ab47887b3557b8bfb9fb96211329ffb9b00cd78bddf9 5481088 lxd-client-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb a575499fd1a6b0328b08a5ec5cb8623c14423f96589005d16dc6587b0bce78a6 4694056 lxd-client_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb e6053aa5e14295ea6cd2c7c19d2052f6bbe9912869c0df3ee13b2ac3e8118cc9 16680928 lxd-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 3e7bb21d7a78211333815cb708c13f05ec902fa0cb733b722494202c1e5d42b8 6606048 lxd-migrate-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb ad388181dda4b30069234a0ba09e0b8e605fb6281f77bb415dbcca5666ace588 5279200 lxd-migrate_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 3488f7ba5c33cb74e199cf8148c01172e4a72f3a02e9a0c43b9b831e22b728b2 13723832 lxd-tools-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb b5aec660ff048170960176ae5aaf584c5baf352fcc4aa6221834ee0a9e81d9da 10597312 lxd-tools_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb bb9aed9b62bddd6edff8379a8db883ed41aa39c0c6827e76fcd1db8f3e975e76 24200 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64-buildd.buildinfo 5827c8df1680c26ba06282402d06ba801b65fd7e67326af436108fb652696fc8 13991036 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb Files: 3ef03079f6376084c3154fc88370206e 5806104 debug optional lxd-agent-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb e8f3b27763cef46130493f11723156d4 4082076 admin optional lxd-agent_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 6741d5acb55413c83849fcaf5c709e83 5481088 debug optional lxd-client-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 9b947dd738ee7c91174e5343c7fd87d4 4694056 admin optional lxd-client_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 0b4d50432492a27cbf890678fe41a993 16680928 debug optional lxd-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb cce8ae89a943dfbfa4040895293014f0 6606048 debug optional lxd-migrate-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 475031e08c6138ce66f1117b0d33c382 5279200 admin optional lxd-migrate_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 8a295c73ec0cac17a18b8accf6639d2a 13723832 debug optional lxd-tools-dbgsym_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb 703a9c89c876ea139e054482e97d2abc 10597312 admin optional lxd-tools_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb f78404b85b0c952316f422f283970976 24200 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64-buildd.buildinfo 88012d8d4dd115f5454545084916642f 13991036 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmpAgA0ACgkQIhSPlPtg qxmmLhAAgkF7aa8uNxEkJnFt61NcT0McXgcEV618HqTbSjN6PZkhitRP2y7/uQvR /grcHplC294DnXsOeDXkXNUG6WIePZdDgWACH4Zul8jGzwqSMdz5SM0xkc4PuZzD CyrCcDlgJ9hXCX4UFL4Gbxvx6BaR+s7a+rzch9QZkwSU7Pk5SSqXSLDD6yWBNf5s Zo4Q6ThfBPYvn437eJC1MYlc3z17CrmIglQcDjpCpNFdHfMj5f6NFhgb7V+JH4P7 +Wgi1JQ5ZveJQ8N2VGUn3RE61uTD4seq6DCZxx/pqMrZ1VaIJqsIyZBZoIC6AMrx KxEOg/WIum7kQzaIbC8lNk/J6lYrZFOxmIQKPTsgjyWXpu4jDIpHsgmjNqorYzIW uDA3s6kKwxYPpohblVYDDohHGXeJsYKQei5bAPwUw+T8H0LirnNooHsO5coW4ub8 yIkKHcXz3HDCB4wpitPX/EJ4xVBChijndqQVYSJ0vfOMZq52g5wAGqjvpQNjmcFI E2Mum6oAgmdlf6UBJxW7ZG0Su/h/3uC3Z1tuGQBIHS7uVS3nAGC8KT+t9kFhgsyd 3ubLX7FZ82uQAVKri+cHbMs/xB4db09ZTv4VyAFie10hwvmxCL80SSBcI1kthgBl Kj7Tch5EF7XFZT9yrKF85GYL4R0/BqjQwyMZa9Qd3f1jup52+TA= =/S4n -----END PGP SIGNATURE-----