From: ftpmaster@ftp-master.debian.org 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Thu, 02 Oct 2025 16:38:32 +0000 
 Source: lxd 
 Binary: lxd lxd-agent lxd-client lxd-client-dbgsym lxd-dbgsym lxd-migrate 
 lxd-migrate-dbgsym lxd-tools lxd-tools-dbgsym 
 Architecture: source amd64 
 Version: 5.0.2-5+deb12u1 
 Distribution: bookworm-security 
 Urgency: high 
 Maintainer: Debian Go Packaging Team  
 Changed-By: Mathias Gibbens  
 Description: 
  lxd        - Powerful system container and virtual machine manager - daemon 
  lxd-agent  - LXD guest agent 
  lxd-client - Powerful system container and virtual machine manager - client 
  lxd-migrate - LXD physical to instance migration tool 
  lxd-tools  - Powerful system container and virtual machine manager - extra 
 too 
 Closes: 1114940 
 Changes: 
  lxd (5.0.2-5+deb12u1) bookworm-security; urgency=high 
  . 
    * Backport fixes for the following security issues that are unfixed by 
      Canonical in the stable-5.0 branch: 
      - CVE-2025-54293 / GHSA-472f-vmf2-pr3h 
      - CVE-2025-54287 / GHSA-w2hg-2v4p-vmh6 
      - CVE-2025-54288 / GHSA-7232-97c6-j525 
    * Backport fixes for the following security issues fixed by Canonical: 
      - CVE-2025-54286 / GHSA-p8hw-rfjg-689h 
    * Backport patch to skip a couple of flaky tests (Closes: #1114940) 
 Checksums-Sha1: 
  de67b4b2e753f6b1e77110d1b2295ec5b6f879dd 3981 lxd_5.0.2-5+deb12u1.dsc 
  79dc1d52d6e2975914114c6927807b6556161cba 3280313 lxd_5.0.2.orig.tar.gz 
  a9fecb1eee693ae9b447f5e8bdfbd7c87df93498 21208 lxd_5.0.2-5+deb1 
 u1.debian.tar.xz 
  db5895338c465c8556bffb88f6a797a0a75e623f 3801356 lxd-agent_5.0. 
 -5+deb12u1_amd64.deb 
  9ff444884d989128fbb28ee3d74686684da602ab 4571684 lxd-client-dbg 
 ym_5.0.2-5+deb12u1_amd64.deb 
  ddf41e71c91c43743a35e7693e4c96aa8e43a945 4492828 lxd-client_5.0 
 2-5+deb12u1_amd64.deb 
  45270bd9eea3f065f58fdc5a8c1ab7d5e4d84b20 14683432 lxd-dbgsym_5. 
 .2-5+deb12u1_amd64.deb 
  a4485d64ebe6522d315aac2744fbb6cf5d4a19b4 5559168 lxd-migrate-db 
 sym_5.0.2-5+deb12u1_amd64.deb 
  05b942677addef145344e2b6c26dd92a29bfece4 5058840 lxd-migrate_5. 
 .2-5+deb12u1_amd64.deb 
  63e743ca860109a5b8fa1d649d56a3f649d42d0e 11439916 lxd-tools-dbg 
 ym_5.0.2-5+deb12u1_amd64.deb 
  ad9b6fa28dacaf59c01690a57b9442b2200d87f5 10036412 lxd-tools_5.0 
 2-5+deb12u1_amd64.deb 
  613f0a9ca5adbb59f61bac56efc0b9fa3b5fe865 22693 lxd_5.0.2-5+deb1 
 u1_amd64.buildinfo 
  3a9c11ccafabbfe7d3d71f0e90a84b7cd7862a5b 14032064 lxd_5.0.2-5+d 
 b12u1_amd64.deb 
 Checksums-Sha256: 
  d926ec462d994bf0f92e79af38554dfb184ea4662125b17f1240f780113fee5e 3981 
 lxd_5.0.2-5+deb12u1.dsc 
  7e59ba843b43b6863b7b88076b1c15b699e7583f8ee575fe35f26ea1b7ce83a9 3280313 
 lxd_5.0.2.orig.tar.gz 
  db83786afb2a514c3dfa8e4734c3957181547c35f2501de7957a2b163387b3b0 21208 
 lxd_5.0.2-5+deb12u1.debian.tar.xz 
  ac3c4521b1ce13e8b23713d901fad784174e46f033005413e1ccd6d2647b30ec 3801356 
 lxd-agent_5.0.2-5+deb12u1_amd64.deb 
  8813d54c883d53082aba52f205c11aab0ef8e64073a0a18e4bb65a9a26662a1b 4571684 
 lxd-client-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  23c9cbfbf5c39807bade7495e21bad971264ea0ff9e83be8e54caf82e5603655 4492828 
 lxd-client_5.0.2-5+deb12u1_amd64.deb 
  60965b1c5d8e36e23b0c4dd7d88e60fc8d6e10d9a64e60ecb00c0be1ffa690a5 14683432 
 lxd-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  460badade2464d2fc76f192992f4455ba296aae72e5f89301d7f18a319347eef 5559168 
 lxd-migrate-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  55b13e6008b20ad7cf47f1f07426b17947b568849b65fd1a42b61593deaf497e 5058840 
 lxd-migrate_5.0.2-5+deb12u1_amd64.deb 
  f4170bb212bea59e9989b99f7568725fa62691bc8e281b6a1bdeae1cefe3925a 11439916 
 lxd-tools-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  8b51d52eac4fed8a109de7eea50efa5fc133b1563e675cb69aebf268b115854c 10036412 
 lxd-tools_5.0.2-5+deb12u1_amd64.deb 
  732222c9b8c03675e3824f8bf7236d125fb52fdf48c57544444fefc2d96d35e7 22693 
 lxd_5.0.2-5+deb12u1_amd64.buildinfo 
  d4ecb283ca8836853cb5a5a59ad2b6aa5539759c6da2f0542d36aab9694ef131 14032064 
 lxd_5.0.2-5+deb12u1_amd64.deb 
 Files: 
  e28702751bda05634ab3bc99f2e522a1 3981 admin optional lxd_5.0.2-5+deb12u1. 
 dsc 
  35087b78cebc2f758da4c84d036231d6 3280313 admin optional lxd_5.0.2.orig.tar. 
 gz 
  0e6d68f87c912d4aef042ac408b121de 21208 admin optional lxd_5.0.2 
 5+deb12u1.debian.tar.xz 
  c6a47d8fd7d67fc972b5045dc1118e6d 3801356 admin optional lxd-age 
 t_5.0.2-5+deb12u1_amd64.deb 
  d5599036908f6fd0d7372bc597c8dfcd 4571684 debug optional lxd-cli 
 nt-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  404b3c2552f4c4465d81593d3f9cafd2 4492828 admin optional lxd-cli 
 nt_5.0.2-5+deb12u1_amd64.deb 
  a0fbfb1a7d3e23676f80d943c0bae4d4 14683432 debug optional lxd-db 
 sym_5.0.2-5+deb12u1_amd64.deb 
  a789f84477bf660b705998e128d9643e 5559168 debug optional lxd-mig 
 ate-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  77565436ff72f91d9676259a2026c0a5 5058840 admin optional lxd-mig 
 ate_5.0.2-5+deb12u1_amd64.deb 
  252d021b662a56b27c22fdcefcbb7045 11439916 debug optional lxd-to 
 ls-dbgsym_5.0.2-5+deb12u1_amd64.deb 
  31dd2e5f2c32b65e22b9743cf8fcaa63 10036412 admin optional lxd-to 
 ls_5.0.2-5+deb12u1_amd64.deb 
  8f8e79b251d036c06ec93a83b54a61c6 22693 admin optional lxd_5.0.2 
 5+deb12u1_amd64.buildinfo 
  afba25bafb8f8c8566b53c535b57d577 14032064 admin optional lxd_5. 
 .2-5+deb12u1_amd64.deb 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQJGBAEBCgAwFiEE1Bp60H32xfynSJ8cKe7i1uz0QvkFAmjqbIASHGdpYm1hdEBk 
 ZWJpYW4ub3JnAAoJECnu4tbs9EL5GD4QAJysiGSdS0usNXFnZHyyraxPeLNo5CB+ 
 2cNIxgjYRCs40mCRMoKrdkAS9Cp3B/FyytqkfukS3zi43fbGwJot9HkK66gjcUYI 
 hjRKZG1ne1fF1vYDhvciNk6cmsJg10o2mWJB9ALzeLe6SVq9c9Vju2sXfaakK9Kl 
 xyz9DGyQijT6PMjto/sny8ILTNT+aLEgYTmseou+qv7KbbodcX1Sl7vXd5lqe7Pa 
 cVQXIguPrcTqmlkkj+/c4rzcNGhRSrhXmxfyo9xUq6OaVeulCsc31hxf1yq2fr0N 
 pEE8h1StGnLB71KHTmvFSxHrHvxvT+MYLx8/Yessxhk9r4Xc7e/kcKPxry9bPDVo 
 BaaO5Dw6qk97IvJx3EpGvOzCEvleMwfXi4RyFdn/84XUUeDDZiCbnuW7RFwskE1L 
 jb1Gq6K8BuoANI/Ki6XULJgnjNQbDyuGUmOB8kO+jpTbo9KVBU7D+fLuP9Jst5ZY 
 2GYxLB0qj5TAIC6xETMDMe0OIR6igYs7YHpl2dWirxDufqrN9FE0oIlrQ3fnXxpP 
  
 [continued in next message] 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)