-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 27 Jun 2026 17:07:59 +0000
Source: lxd
Architecture: source
Version: 5.0.2+git20231211.1364ae4-9+deb13u7
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Mathias Gibbens <gibmat@debian.org>
Changes:
lxd (5.0.2+git20231211.1364ae4-9+deb13u7) trixie-security; urgency=high
.
* Cherry-pick fixes for the following security issues:
- CVE-2026-9639 / GHSA-j93m-3j9p-m5m8
- CVE-2026-9640 / GHSA-ppq7-4492-5552
- CVE-2026-48749 / GHSA-vghh-5rfx-xhq8
- CVE-2026-48750 / GHSA-9j25-mm2h-2f76
- CVE-2026-48751 / GHSA-47w9-6r3f-938g
- CVE-2026-48752 / GHSA-jpf8-86f3-wp38
- CVE-2026-48755 / GHSA-fmc8-p6q7-75cc
- CVE-2026-48769 / GHSA-pjff-c2wc-f6jm
- CVE-2026-55621 / GHSA-7mr3-28h5-m5vx
- CVE-2026-55622 / GHSA-qx75-2p3r-pwm5
Checksums-Sha1:
e2da1c892e782a1576240a043115b500acf36f36 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u7.dsc
5f6cc2c4538a8b3c3df86d8a472840fad452da2e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
b2cc6ebdb414f70a588f05932e54ca0313678757 57580 lxd_5.0.2+git20231211.1364ae4-9+deb13u7.debian.tar.xz
7590e2d79885661039d0c39f6f59f3f77f94d65e 24765 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.buildinfo
Checksums-Sha256:
f86f60d52a30a0812aa9d0c5dcefbcd025c7b18a3737e9ec7a15445442ca5652 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u7.dsc
e03a147d53feed1f7c94217cac9f79a64747e4eb11a04a934c2b1d24b26ffc1e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
02035c7bf88e9bf8175049435f0690674288d77394066c8039fbad99bd641c7d 57580 lxd_5.0.2+git20231211.1364ae4-9+deb13u7.debian.tar.xz
e8ff93e3aab8d2d7ec8de5ff125c196a401ef5b687947c16a8653f4534cdee93 24765 lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.buildinfo
Files:
879f7668d1ea17a95abcfa8744d18b58 4428 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7.dsc
be1a564642b64467690af9739fec9e33 3523275 admin optional lxd_5.0.2+git20231211.1364ae4.orig.tar.gz
bd308fda5228e57c5347adeda03e9bae 57580 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7.debian.tar.xz
9eb71c5876c9fbd8ff66c5e44b921073 24765 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=GPXd
-----END PGP SIGNATURE-----
