-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Feb 2026 23:53:22 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: ppc64el Version: 5.0.2-5+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Changes: lxd (5.0.2-5+deb12u3) bookworm-security; urgency=high . * Cherry-pick fixes for the following security issues: - CVE-2026-23953 / GHSA-x6jc-phwx-hp32 - CVE-2026-23954 / GHSA-7f67-crqm-jgh7 Checksums-Sha1: 2d3ea230e383de7be693e28a18e04ab2ae0c850a 3175564 lxd-agent_5.0.2-5+deb12u3_ppc64el.deb 5454eaf0b045042654ab1178fa14b1f4d4c63cee 4315176 lxd-client-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 62e5a70d483e71f39dda095c1dcc991b7d7db6d1 3759580 lxd-client_5.0.2-5+deb12u3_ppc64el.deb 09f93377c246afd1b4d9526aa23bc2a52eb00fdf 13977252 lxd-dbgsym_5.0.2-5+deb12u3_ppc64el.deb e95af3b08b8a0e61925ffe663b420cc2c20510b6 5280152 lxd-migrate-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 2f38ad27da7e7bce49438eab428a3f651a9063ef 4231372 lxd-migrate_5.0.2-5+deb12u3_ppc64el.deb 258b8b27ecd72bc1409679b7c5343bef5e01c6ed 10834652 lxd-tools-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 00ff2ae6ee45af8beab18e46590513721bf9c9f7 8473616 lxd-tools_5.0.2-5+deb12u3_ppc64el.deb 763ca1b8292bb6649a00ab38057f7ae5edc01967 22512 lxd_5.0.2-5+deb12u3_ppc64el-buildd.buildinfo a8bf7f238bb01c31e88e1611c6599101849a6d5d 11630064 lxd_5.0.2-5+deb12u3_ppc64el.deb Checksums-Sha256: cf858a70f5e9e527a5554be168aebe93446d7483d61e6046eb925d9d432d5fa1 3175564 lxd-agent_5.0.2-5+deb12u3_ppc64el.deb 386fb841f3f6911331163997d056183ed5dd72f6993a5a79360cfde91ae40b5c 4315176 lxd-client-dbgsym_5.0.2-5+deb12u3_ppc64el.deb f557dbc60268ead11a2307b4ea49c4e0c5d950174b8a9b698e5f0057968625d6 3759580 lxd-client_5.0.2-5+deb12u3_ppc64el.deb d8988c305abc3a3c732fe6b66645286af2d004a196c35b9634f3134f7dd7c5e4 13977252 lxd-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 64a3bfa86b54fde99a0406b5daf17a185fd2490d40ab89de4a8fded682aeac4a 5280152 lxd-migrate-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 566f63e6e6dd6a6aba4651eae655fb08acc17d23a558db24c3832b4d414c8f97 4231372 lxd-migrate_5.0.2-5+deb12u3_ppc64el.deb d60f99ab8c733817f518bd714e2fdfdb72f94e6ec94ba8674a429a6e377cbcbb 10834652 lxd-tools-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 5669d4d9ed8fbced830185006390c8c2bef76c35456472814fec12ef5fd9e4cc 8473616 lxd-tools_5.0.2-5+deb12u3_ppc64el.deb 6ef87dbbaa09582f7d9c218655a543c9c93799445c71026a8cb9fb7ddfc5baa9 22512 lxd_5.0.2-5+deb12u3_ppc64el-buildd.buildinfo 33766e40c5c5d890d234a4678bf6bb21bc1097512995081664e43266ce681d24 11630064 lxd_5.0.2-5+deb12u3_ppc64el.deb Files: 5851793b4f782ed723740bb8b99a841c 3175564 admin optional lxd-agent_5.0.2-5+deb12u3_ppc64el.deb 5e2d690fc4990ef10b3231cdb5088b3f 4315176 debug optional lxd-client-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 9ff664d2228afad81f081a15e201f345 3759580 admin optional lxd-client_5.0.2-5+deb12u3_ppc64el.deb a2ddce632896c198a03967594d1dac1a 13977252 debug optional lxd-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 810cdbc3bdf8a67f5510176f6b4f44ff 5280152 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u3_ppc64el.deb 7bdae1ae81ca0933058266aa5921a6d2 4231372 admin optional lxd-migrate_5.0.2-5+deb12u3_ppc64el.deb 392019abe072bbe97f1ca252c0a3eca0 10834652 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u3_ppc64el.deb dd739ffad00e351a00f2dae72d054b2c 8473616 admin optional lxd-tools_5.0.2-5+deb12u3_ppc64el.deb b73dadfbcbec7c6656a1f394af625f5f 22512 admin optional lxd_5.0.2-5+deb12u3_ppc64el-buildd.buildinfo 5c223a19ce05108a74c2db5a6e0ee644 11630064 admin optional lxd_5.0.2-5+deb12u3_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmmjKskACgkQDNLUPhbm g7NN8BAAtNMs4WDnDEaqc47+1dhDTeJ0hQ+RLSgo0Q05Vo3E7DJ1TvfW5ic5dO7X NTZGM+EwkmQgV3btta5mA0t959xVanbID3nOHgozqu1L2MpTqvBJ4T0/J0xZqkIF Sf8sAQ+0nDf6DvVoc81HaiDIYdTszIBlQg61Em63VvoVBFOHN1/M+b6OlxgaQBCI PqbuDX6ArY1PUxbpmELLrvwnXctKT6/X7ktWZwOBKfaUvglZAQO3jRutJjSYLW91 +J2KuuuzssS6JqQD97olbqb03pzDJDqdZGjnLjLPJprMjFAL4lHhRAfiEqal85bu WO8AX5kgT3n4cceDOJjxEQXq+jTFZnWVSuylL/iRDI27u1YMpIcJEQCNCtC603p3 +OUX5SxurrZQ1mDgtp0EogQZ8QDEcx8wGIas2tgA0cvurmfZwsLdxfoKvmhTwxxW fb2mobKrbimeugHLAvamC0343NX3CWDV4KucNIo+JtgXXVHHJ7i0bKEHg9whhcSg f0RcZVUEPzbgN4zDKKeNuER87UqlIDcIQ1XodBtogQwQQt31uN1euGEFuoqAla6z av1/QHVbmwhB8nKQCni4IMkBknhlKZvOh7OhR/ic/PMfAENL/mOYNuO87vcNqCxs R6ie4Sbfm0eeZu5h1sV8T+S3MhfczZ08VmlHHT+dPOhtTNbtT0g= =77ca -----END PGP SIGNATURE-----