-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Feb 2026 23:53:22 +0000
Source: lxd
Architecture: source
Version: 5.0.2-5+deb12u3
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
lxd (5.0.2-5+deb12u3) bookworm-security; urgency=high
.
* Cherry-pick fixes for the following security issues:
- CVE-2026-23953 / GHSA-x6jc-phwx-hp32
- CVE-2026-23954 / GHSA-7f67-crqm-jgh7
Checksums-Sha1:
8b9a5d08f9a5e2687dbd9b8d53a2ff2d94862d91 3981 lxd_5.0.2-5+deb12u3.dsc
79dc1d52d6e2975914114c6927807b6556161cba 3280313 lxd_5.0.2.orig.tar.gz
d749a707cb4e47b6dd58fd64dde8ab12ced1f089 25544 lxd_5.0.2-5+deb12u3.debian.tar.xz
d77817af7f690f8f3eb4c1fe8158995a331679d9 22703 lxd_5.0.2-5+deb12u3_amd64.buildinfo
Checksums-Sha256:
484d890e24719acda2a4b96ceda03777ec32731eafa880f7d42f6fc5480d09f4 3981 lxd_5.0.2-5+deb12u3.dsc
7e59ba843b43b6863b7b88076b1c15b699e7583f8ee575fe35f26ea1b7ce83a9 3280313 lxd_5.0.2.orig.tar.gz
aaa6703dbf63e8b30daec5b785e48362a728c2c7c444487ae884dc1a8d443e3f 25544 lxd_5.0.2-5+deb12u3.debian.tar.xz
12faf6bc1915989b56d442950eccdba6f4879dc590edb6854b2a33ac7032c316 22703 lxd_5.0.2-5+deb12u3_amd64.buildinfo
Files:
c6fdff5a26a9e3ec9caae6ac55d10e6e 3981 admin optional lxd_5.0.2-5+deb12u3.dsc
35087b78cebc2f758da4c84d036231d6 3280313 admin optional lxd_5.0.2.orig.tar.gz
4db068db59b3e213f4f358e814eb2d61 25544 admin optional lxd_5.0.2-5+deb12u3.debian.tar.xz
5a4eccac07819ff107ba9fbeacd847f3 22703 admin optional lxd_5.0.2-5+deb12u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=VwE9
-----END PGP SIGNATURE-----
