-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 24 Mar 2026 23:41:46 +0000 Source: lxd Binary: golang-github-canonical-lxd-dev Architecture: all Version: 5.0.2+git20231211.1364ae4-9+deb13u4 Distribution: trixie-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Mathias Gibbens Description: golang-github-canonical-lxd-dev - Powerful system container and virtual machine manager - library Changes: lxd (5.0.2+git20231211.1364ae4-9+deb13u4) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r - CVE-2026-33897 / GHSA-83xr-5xxr-mh92 Checksums-Sha1: 3d66b061bcb8a7d4cfcda41b7ea49e57f82a8f44 1390644 golang-github-canonical-lxd-dev_5.0.2+git20231211.1364ae4-9+deb13u4_all.deb 11395c70d83ee75583e53076c4abdfbe06a179e4 20879 lxd_5.0.2+git20231211.1364ae4-9+deb13u4_all-buildd.buildinfo Checksums-Sha256: 3f6e69fa9b1d4ccfd8ad75e09a8237b94420f39d4af8b75e2ecb8112c359c0a9 1390644 golang-github-canonical-lxd-dev_5.0.2+git20231211.1364ae4-9+deb13u4_all.deb 7e84bf8aa4b66d64338ad8c4b86279a56db358c44b3ac2413b25a7a7b331db67 20879 lxd_5.0.2+git20231211.1364ae4-9+deb13u4_all-buildd.buildinfo Files: 175a63eba65c76a2832d7fa20467189d 1390644 golang optional golang-github-canonical-lxd-dev_5.0.2+git20231211.1364ae4-9+deb13u4_all.deb 807f19431cf53e26b1cfc10e171e5dcb 20879 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u4_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmnG7jUACgkQmgPNRvTf /zdXPg//Slp6kEiuzZTIilJv94oLFAWPEG9JjWuG0SvLAaj06tIFC2CxjG4QkJjm h7/25hOvJSIjpQVv0fwmB8MyZ332T5udEXbax+5M/w6362RZJh2X3vABFmmBZipu eR02uuKXRPZzomAmGQzOoLlLxCgUpO/5+r3ZZ/vcrqf416Em23MxxhzhkWfm9xl2 29c6lpN8juy/SV+txKGYftcJ0cpL4dkjMorsbdfVO1E3PJbWNwSVZma7/C5E1P8D Ov2bpWFHgdVYnQLThzCS+FrpNDpAw7KUUZlCOHRihnCWe++x0ooJSYBAHWfQdRaM Bsf1zyqctTHb2Vdu3/UpQOcHpm1/L1n8ElTf7LgcFAcDC3P3n6o0ApK8fgzw3GJm oJoIHVseAm22W4nNGZrfxIWxYSTVtZMn5bJOxBHGCuaGLKwW7iezMGESuy/N4NlR FSl4sQR+D9zlMlh2g/CfKyePJN5JI0Bf5klNlenIr2PIV4AiPDa5slW7A0JZ+1nl wE3wickamp2iG88zcsFEYx0ggT3BiyOL7JKPhsHQUc83GZN2vbi7UjUANtZPgwWs Qt8o7k7dUUNdq+JaUNfeDY97o3+uQ0o217sb2zWpb1Gb4kMqSzqppxJkEnGZfodW ruAGuSjgX2Yl7rTA+2ilnVJgWkF6D6F6xjktXWygXG6LGJ9WULk= =vAJk -----END PGP SIGNATURE-----