-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Feb 2026 23:42:15 +0000
Source: lxd
Architecture: source
Version: 5.0.2+git20231211.1364ae4-9+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
lxd (5.0.2+git20231211.1364ae4-9+deb13u3) trixie-security; urgency=high
.
* Cherry-pick fixes for the following security issues:
- CVE-2026-23953 / GHSA-x6jc-phwx-hp32
- CVE-2026-23954 / GHSA-7f67-crqm-jgh7
Checksums-Sha1:
416359ae50c52f61611d8efdd41e38a110e6836e 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.dsc
5f6cc2c4538a8b3c3df86d8a472840fad452da2e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
89425e14275e1a010c202eac85a609e6b1120120 35048 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.debian.tar.xz
0991f1a686c7d8114faf17520d0d066cd65e81a3 24692 lxd_5.0.2+git20231211.1364ae4-9+deb13u3_amd64.buildinfo
Checksums-Sha256:
74652daadec52e6b0c5f9e324f7c3fd158b535a3acf53cc9d15d3c16e08a1f88 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.dsc
e03a147d53feed1f7c94217cac9f79a64747e4eb11a04a934c2b1d24b26ffc1e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
62d2b0d060fa5087e9ac8b2183261d736d7d24953954b4a8eed058ab3fb753de 35048 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.debian.tar.xz
57c323508e7eda70ef60298e2165712cea581272147c6ecd10956ca07906b712 24692 lxd_5.0.2+git20231211.1364ae4-9+deb13u3_amd64.buildinfo
Files:
235bd52f03bcc38b745cd80df61a6334 4428 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u3.dsc
be1a564642b64467690af9739fec9e33 3523275 admin optional lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
15ccecdd9250b07e7e8dd108cc1efcff 35048 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u3.debian.tar.xz
2c6a7d465e3a8ce3b4bdc05936d282eb 24692 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=xj6c
-----END PGP SIGNATURE-----
