-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Oct 2025 16:38:32 +0000 Source: lxd Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym Architecture: source amd64 Version: 5.0.2-5+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Go Packaging Team Changed-By: Mathias Gibbens Description: lxd - Powerful system container and virtual machine manager - daemon lxd-agent - LXD guest agent lxd-client - Powerful system container and virtual machine manager - client lxd-migrate - LXD physical to instance migration tool lxd-tools - Powerful system container and virtual machine manager - extra too Closes: 1114940 Changes: lxd (5.0.2-5+deb12u1) bookworm-security; urgency=high . * Backport fixes for the following security issues that are unfixed by Canonical in the stable-5.0 branch: - CVE-2025-54293 / GHSA-472f-vmf2-pr3h - CVE-2025-54287 / GHSA-w2hg-2v4p-vmh6 - CVE-2025-54288 / GHSA-7232-97c6-j525 * Backport fixes for the following security issues fixed by Canonical: - CVE-2025-54286 / GHSA-p8hw-rfjg-689h * Backport patch to skip a couple of flaky tests (Closes: #1114940) Checksums-Sha1: de67b4b2e753f6b1e77110d1b2295ec5b6f879dd 3981 lxd_5.0.2-5+deb12u1.dsc 79dc1d52d6e2975914114c6927807b6556161cba 3280313 lxd_5.0.2.orig.tar.gz a9fecb1eee693ae9b447f5e8bdfbd7c87df93498 21208 lxd_5.0.2-5+deb12u1.debian.tar.xz db5895338c465c8556bffb88f6a797a0a75e623f 3801356 lxd-agent_5.0.2-5+deb12u1_amd64.deb 9ff444884d989128fbb28ee3d74686684da602ab 4571684 lxd-client-dbgsym_5.0.2-5+deb12u1_amd64.deb ddf41e71c91c43743a35e7693e4c96aa8e43a945 4492828 lxd-client_5.0.2-5+deb12u1_amd64.deb 45270bd9eea3f065f58fdc5a8c1ab7d5e4d84b20 14683432 lxd-dbgsym_5.0.2-5+deb12u1_amd64.deb a4485d64ebe6522d315aac2744fbb6cf5d4a19b4 5559168 lxd-migrate-dbgsym_5.0.2-5+deb12u1_amd64.deb 05b942677addef145344e2b6c26dd92a29bfece4 5058840 lxd-migrate_5.0.2-5+deb12u1_amd64.deb 63e743ca860109a5b8fa1d649d56a3f649d42d0e 11439916 lxd-tools-dbgsym_5.0.2-5+deb12u1_amd64.deb ad9b6fa28dacaf59c01690a57b9442b2200d87f5 10036412 lxd-tools_5.0.2-5+deb12u1_amd64.deb 613f0a9ca5adbb59f61bac56efc0b9fa3b5fe865 22693 lxd_5.0.2-5+deb12u1_amd64.buildinfo 3a9c11ccafabbfe7d3d71f0e90a84b7cd7862a5b 14032064 lxd_5.0.2-5+deb12u1_amd64.deb Checksums-Sha256: d926ec462d994bf0f92e79af38554dfb184ea4662125b17f1240f780113fee5e 3981 lxd_5.0.2-5+deb12u1.dsc 7e59ba843b43b6863b7b88076b1c15b699e7583f8ee575fe35f26ea1b7ce83a9 3280313 lxd_5.0.2.orig.tar.gz db83786afb2a514c3dfa8e4734c3957181547c35f2501de7957a2b163387b3b0 21208 lxd_5.0.2-5+deb12u1.debian.tar.xz ac3c4521b1ce13e8b23713d901fad784174e46f033005413e1ccd6d2647b30ec 3801356 lxd-agent_5.0.2-5+deb12u1_amd64.deb 8813d54c883d53082aba52f205c11aab0ef8e64073a0a18e4bb65a9a26662a1b 4571684 lxd-client-dbgsym_5.0.2-5+deb12u1_amd64.deb 23c9cbfbf5c39807bade7495e21bad971264ea0ff9e83be8e54caf82e5603655 4492828 lxd-client_5.0.2-5+deb12u1_amd64.deb 60965b1c5d8e36e23b0c4dd7d88e60fc8d6e10d9a64e60ecb00c0be1ffa690a5 14683432 lxd-dbgsym_5.0.2-5+deb12u1_amd64.deb 460badade2464d2fc76f192992f4455ba296aae72e5f89301d7f18a319347eef 5559168 lxd-migrate-dbgsym_5.0.2-5+deb12u1_amd64.deb 55b13e6008b20ad7cf47f1f07426b17947b568849b65fd1a42b61593deaf497e 5058840 lxd-migrate_5.0.2-5+deb12u1_amd64.deb f4170bb212bea59e9989b99f7568725fa62691bc8e281b6a1bdeae1cefe3925a 11439916 lxd-tools-dbgsym_5.0.2-5+deb12u1_amd64.deb 8b51d52eac4fed8a109de7eea50efa5fc133b1563e675cb69aebf268b115854c 10036412 lxd-tools_5.0.2-5+deb12u1_amd64.deb 732222c9b8c03675e3824f8bf7236d125fb52fdf48c57544444fefc2d96d35e7 22693 lxd_5.0.2-5+deb12u1_amd64.buildinfo d4ecb283ca8836853cb5a5a59ad2b6aa5539759c6da2f0542d36aab9694ef131 14032064 lxd_5.0.2-5+deb12u1_amd64.deb Files: e28702751bda05634ab3bc99f2e522a1 3981 admin optional lxd_5.0.2-5+deb12u1.dsc 35087b78cebc2f758da4c84d036231d6 3280313 admin optional lxd_5.0.2.orig.tar.gz 0e6d68f87c912d4aef042ac408b121de 21208 admin optional lxd_5.0.2-5+deb12u1.debian.tar.xz c6a47d8fd7d67fc972b5045dc1118e6d 3801356 admin optional lxd-agent_5.0.2-5+deb12u1_amd64.deb d5599036908f6fd0d7372bc597c8dfcd 4571684 debug optional lxd-client-dbgsym_5.0.2-5+deb12u1_amd64.deb 404b3c2552f4c4465d81593d3f9cafd2 4492828 admin optional lxd-client_5.0.2-5+deb12u1_amd64.deb a0fbfb1a7d3e23676f80d943c0bae4d4 14683432 debug optional lxd-dbgsym_5.0.2-5+deb12u1_amd64.deb a789f84477bf660b705998e128d9643e 5559168 debug optional lxd-migrate-dbgsym_5.0.2-5+deb12u1_amd64.deb 77565436ff72f91d9676259a2026c0a5 5058840 admin optional lxd-migrate_5.0.2-5+deb12u1_amd64.deb 252d021b662a56b27c22fdcefcbb7045 11439916 debug optional lxd-tools-dbgsym_5.0.2-5+deb12u1_amd64.deb 31dd2e5f2c32b65e22b9743cf8fcaa63 10036412 admin optional lxd-tools_5.0.2-5+deb12u1_amd64.deb 8f8e79b251d036c06ec93a83b54a61c6 22693 admin optional lxd_5.0.2-5+deb12u1_amd64.buildinfo afba25bafb8f8c8566b53c535b57d577 14032064 admin optional lxd_5.0.2-5+deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmjqbIASHGdpYm1hdEBk ZWJpYW4ub3JnAAoJECnu4tbs9EL5GD4QAJysiGSdS0usNXFnZHyyraxPeLNo5CB+ 2cNIxgjYRCs40mCRMoKrdkAS9Cp3B/FyytqkfukS3zi43fbGwJot9HkK66gjcUYI hjRKZG1ne1fF1vYDhvciNk6cmsJg10o2mWJB9ALzeLe6SVq9c9Vju2sXfaakK9Kl xyz9DGyQijT6PMjto/sny8ILTNT+aLEgYTmseou+qv7KbbodcX1Sl7vXd5lqe7Pa cVQXIguPrcTqmlkkj+/c4rzcNGhRSrhXmxfyo9xUq6OaVeulCsc31hxf1yq2fr0N pEE8h1StGnLB71KHTmvFSxHrHvxvT+MYLx8/Yessxhk9r4Xc7e/kcKPxry9bPDVo BaaO5Dw6qk97IvJx3EpGvOzCEvleMwfXi4RyFdn/84XUUeDDZiCbnuW7RFwskE1L jb1Gq6K8BuoANI/Ki6XULJgnjNQbDyuGUmOB8kO+jpTbo9KVBU7D+fLuP9Jst5ZY 2GYxLB0qj5TAIC6xETMDMe0OIR6igYs7YHpl2dWirxDufqrN9FE0oIlrQ3fnXxpP qagJT/xBzTxyPmjRyVluT8wjZYmTo5+kJom1BNAQ/0hqMI45JgRy/xVx/4b6hKuA z7vCWpA/r2kCcBKz3N8kCoIT6RB88j1jS7j4fgHh49dlPoPckRvSF+v35fXfxmBn IjqqBVA63L6A =GTiB -----END PGP SIGNATURE-----