-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 24 Mar 2026 23:43:38 +0000
Source: lxd
Architecture: source
Version: 5.0.2-5+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
lxd (5.0.2-5+deb12u4) bookworm-security; urgency=high
.
* Cherry-pick fixes for the following security issues:
- CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
- CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
- CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
b148cf6348723ff65b4ac25d61ff00915151c57a 4006 lxd_5.0.2-5+deb12u4.dsc
79dc1d52d6e2975914114c6927807b6556161cba 3280313 lxd_5.0.2.orig.tar.gz
e34e5dcd1081631446265dc1cfdb5d117c694141 30680 lxd_5.0.2-5+deb12u4.debian.tar.xz
0a380379f884f227b537728d0e7ae6dcb0d90e4c 22759 lxd_5.0.2-5+deb12u4_amd64.buildinfo
Checksums-Sha256:
415fb92d45fd594bd978f3c74e9c2440265467e3a46265d7ff93eefd5f1d2999 4006 lxd_5.0.2-5+deb12u4.dsc
7e59ba843b43b6863b7b88076b1c15b699e7583f8ee575fe35f26ea1b7ce83a9 3280313 lxd_5.0.2.orig.tar.gz
70cefaec4ce819afebb7587c5f9f133cda2fbcd0ba7f343395faff33f310e744 30680 lxd_5.0.2-5+deb12u4.debian.tar.xz
28442d620fd52996200058feb96ba533ce50bfda7a8358c96ef1f2fbbd3e3286 22759 lxd_5.0.2-5+deb12u4_amd64.buildinfo
Files:
ed946f53b43bc8421bb697c307936066 4006 admin optional lxd_5.0.2-5+deb12u4.dsc
35087b78cebc2f758da4c84d036231d6 3280313 admin optional lxd_5.0.2.orig.tar.gz
35a6a44b2857790bd2424d6796cf39a2 30680 admin optional lxd_5.0.2-5+deb12u4.debian.tar.xz
eeffa9922282d3f2bcc15bb61463044a 22759 admin optional lxd_5.0.2-5+deb12u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=qWmH
-----END PGP SIGNATURE-----
