-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 24 Mar 2026 23:41:46 +0000
Source: lxd
Architecture: source
Version: 5.0.2+git20231211.1364ae4-9+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
lxd (5.0.2+git20231211.1364ae4-9+deb13u4) trixie-security; urgency=high
.
* Cherry-pick fixes for the following security issues:
- CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
- CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
- CVE-2026-33897 / GHSA-83xr-5xxr-mh92
Checksums-Sha1:
501dd29d9e9c0306e01a058176845586310df60b 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.dsc
5f6cc2c4538a8b3c3df86d8a472840fad452da2e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
b0f2be91547f8f34fe0aa42c6d4cb289f1fcea3b 40144 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.debian.tar.xz
8a5bf634aba04ebdfdc3835e084b6b2dea8659e6 24721 lxd_5.0.2+git20231211.1364ae4-9+deb13u4_amd64.buildinfo
Checksums-Sha256:
ad3b106495f7987e63dd38b7b690535b9b1a444cdea5a5ddb182ad10cd2c038c 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.dsc
e03a147d53feed1f7c94217cac9f79a64747e4eb11a04a934c2b1d24b26ffc1e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
35b82de63daa255077edeb1410dd04794a998f0271c0f0406f454ac9f5bcf759 40144 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.debian.tar.xz
6b8bed8fb170eb35cccf0e8d450754c6251ec4840b3ae8a127128768387e698d 24721 lxd_5.0.2+git20231211.1364ae4-9+deb13u4_amd64.buildinfo
Files:
6748fc5d1a11fc93bf3d3a9000800865 4428 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4.dsc
be1a564642b64467690af9739fec9e33 3523275 admin optional lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
29b69d8f9837aa70ae603d51cfc8bd1e 40144 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4.debian.tar.xz
30952a01c65e0a8ace47585b3cda1500 24721 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=NJcD
-----END PGP SIGNATURE-----