[SECURITY] [DSA 6213-1] lxd security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6213-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
April 15, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : lxd
CVE ID : CVE-2026-34177 CVE-2026-34178 CVE-2026-34179
Multiple security issues were discovered in LXD, a system container and
virtual machine manager, which could result in restriction bypass or
privilege escalation.
For the oldstable distribution (bookworm), these problems have been fixed
in version 5.0.2-5+deb12u5.
For the stable distribution (trixie), these problems have been fixed in
version 5.0.2+git20231211.1364ae4-9+deb13u5.
We recommend that you upgrade your lxd packages.
For the detailed security status of lxd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/lxd
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=WvaS
-----END PGP SIGNATURE-----
Reply to: