-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 23:41:46 +0000 Source: lxd Architecture: source Version: 5.0.2+git20231211.1364ae4-9+deb13u4 Distribution: trixie-security Urgency: high Maintainer: Debian Go Packaging Team Changed-By: Mathias Gibbens Changes: lxd (5.0.2+git20231211.1364ae4-9+deb13u4) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r - CVE-2026-33897 / GHSA-83xr-5xxr-mh92 Checksums-Sha1: 501dd29d9e9c0306e01a058176845586310df60b 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.dsc 5f6cc2c4538a8b3c3df86d8a472840fad452da2e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz b0f2be91547f8f34fe0aa42c6d4cb289f1fcea3b 40144 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.debian.tar.xz 8a5bf634aba04ebdfdc3835e084b6b2dea8659e6 24721 lxd_5.0.2+git20231211.1364ae4-9+deb13u4_amd64.buildinfo Checksums-Sha256: ad3b106495f7987e63dd38b7b690535b9b1a444cdea5a5ddb182ad10cd2c038c 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.dsc e03a147d53feed1f7c94217cac9f79a64747e4eb11a04a934c2b1d24b26ffc1e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz 35b82de63daa255077edeb1410dd04794a998f0271c0f0406f454ac9f5bcf759 40144 lxd_5.0.2+git20231211.1364ae4-9+deb13u4.debian.tar.xz 6b8bed8fb170eb35cccf0e8d450754c6251ec4840b3ae8a127128768387e698d 24721 lxd_5.0.2+git20231211.1364ae4-9+deb13u4_amd64.buildinfo Files: 6748fc5d1a11fc93bf3d3a9000800865 4428 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4.dsc be1a564642b64467690af9739fec9e33 3523275 admin optional lxd_5.0.2+git20231211.1364ae4.orig.tar.gz 29b69d8f9837aa70ae603d51cfc8bd1e 40144 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4.debian.tar.xz 30952a01c65e0a8ace47585b3cda1500 24721 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmnG5ysSHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5ig8QAIihGRFse6WFSE9Ra/sTmXLteM6+rjRx tNzRIU44wZX0AXq+0wLloCgnasI9RWHqMZfKnYzIcjkeMsRg9+OE1W5qODsOW0mm WTik5nvjGPU1TiySNRHkDPI6r7Cq55xIEA2wkazPRbaUcFugXW0MBTzzqTxgms8B fAWCiPSEzNcyycLXHgFYoYUiSTtG+hElU1CyxgoMPJtkAHbYV8XOqAGmRGCXWR4n cTjnG9q6H07dE01x9CWMiLkcIDtAFVwUHT7Fxiu22FrTLA86rue7aQyZnCrOwMzu LYIgCFLIRPkYhgJXmC3Ru7M1NWqMCi+lP1CHRFDK8Y8368BdotTy/F61Ay8wvk+n 7eSeipXqwx0rUFjBrC8mXMrdnnolC98ail90MNfcs6t4YS3uiT9mtbon8tkICFfJ fQ9I0VC9cinRkX8/dl0t23FOwyWXRco6OiDRLmTmMBF9Mj/GKT8izPMQgJ03AFGI de9ljjm3cl2KsfEYw9XbW7ji2gw10/x1c0dR0cK2ZItvHbPUJqs1BDwBWtxfJQyR pNiPne+P4SkQy0ELkePQBFNzbGrm2Sv5Jo/M7ObSPfEVh1o3X8Ok22UK5oeUwMbV LVxVKQBws1j7/ECbGJvPUUdCqyxfj2QdvfonUs4WGK2PcA3jwaxW3OrUcN8jZvMD cTE4x3eWsDd/ =NJcD -----END PGP SIGNATURE-----