-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Feb 2026 23:42:15 +0000 Source: lxd Architecture: source Version: 5.0.2+git20231211.1364ae4-9+deb13u3 Distribution: trixie-security Urgency: high Maintainer: Debian Go Packaging Team Changed-By: Mathias Gibbens Changes: lxd (5.0.2+git20231211.1364ae4-9+deb13u3) trixie-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: 416359ae50c52f61611d8efdd41e38a110e6836e 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.dsc 5f6cc2c4538a8b3c3df86d8a472840fad452da2e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz 89425e14275e1a010c202eac85a609e6b1120120 35048 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.debian.tar.xz 0991f1a686c7d8114faf17520d0d066cd65e81a3 24692 lxd_5.0.2+git20231211.1364ae4-9+deb13u3_amd64.buildinfo Checksums-Sha256: 74652daadec52e6b0c5f9e324f7c3fd158b535a3acf53cc9d15d3c16e08a1f88 4428 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.dsc e03a147d53feed1f7c94217cac9f79a64747e4eb11a04a934c2b1d24b26ffc1e 3523275 lxd_5.0.2+git20231211.1364ae4.orig.tar.gz 62d2b0d060fa5087e9ac8b2183261d736d7d24953954b4a8eed058ab3fb753de 35048 lxd_5.0.2+git20231211.1364ae4-9+deb13u3.debian.tar.xz 57c323508e7eda70ef60298e2165712cea581272147c6ecd10956ca07906b712 24692 lxd_5.0.2+git20231211.1364ae4-9+deb13u3_amd64.buildinfo Files: 235bd52f03bcc38b745cd80df61a6334 4428 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u3.dsc be1a564642b64467690af9739fec9e33 3523275 admin optional lxd_5.0.2+git20231211.1364ae4.orig.tar.gz 15ccecdd9250b07e7e8dd108cc1efcff 35048 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u3.debian.tar.xz 2c6a7d465e3a8ce3b4bdc05936d282eb 24692 admin optional lxd_5.0.2+git20231211.1364ae4-9+deb13u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmmjJZYSHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5ZIQQALrcFJJqoacgnaLXS8+/jGif1t20PmEc bAEG+FCpgpAgnPqFzvRzlRh+vCijkJjUcXvxf+QFVSmyKbw9numXg3Wz6BgjJAs6 ZfQRQqJy0+FkClJhX6vlBhGI6rt4yY6kxJtQLcrfaHL/1pjYsUZHZ1oBN80uaBpP TveswLPu9Afv7WRlij66Bbl8QaanobUL98nKjQVzZuNLIK8fnkO6NcaMlMKokSMh Sq9goJAGkA/0iEv3F0F6es9fHVfZov4ybeZNa70wX6yARlf4s4rrNEUw92pZiUuL 6tdIWrAASTNavHP0I/gmdTFIufWbc6YrMQo6YcQ/eRoUERTTpZud132xWzSKHUrn X3XRCgPT8BNKGZ+C3P65ybe05smmXxdcWMiJsarXnZ1pY/UdKMWAgTrV0cy/FIi5 7qZJHRD9RZ+iUTe/Nd6WI1r4RAy8QUCoc7vjnQ2SX+VOJeA/8aCj/g2ELL26Cs9p 2TyiHz4SPO9vdahNhcQmqw6rViNOgm5HjECYqHXlCKKDc42OBfuVHJ78kKjRAPPO GpzPy4+gz0dMwp2Lh496ioK60ZwSY7lIRXyeSDL5M1jqIv7jQSZMAjE/EQKkD8kL pNJITNJu/ggnNQvVcrlwaRSpwpVC6gC12PQKHlwq5maDggs4O3fYpQfx6kCgRi/e nEXmLreuw1Oc =xj6c -----END PGP SIGNATURE-----