[Git][security-tracker-team/security-tracker][master] lxd DSA

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d5c5ba5f by Moritz Mühlenhoff at 2026-03-31T22:43:28+02:00
lxd DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1405,7 +1405,7 @@ CVE-2026-33743 (Incus is a system container and virtual machine manager. Prior t
 CVE-2026-33897 (Incus is a system container and virtual machine manager. Prior to vers ...)
 	{DSA-6184-1}
 	- incus 6.0.6-2
-	- lxd <not-affected> (Vulnerable code not present)
+	- lxd <removed>
 	NOTE: https://github.com/lxc/incus/pull/3092
 	NOTE: https://github.com/lxc/incus/security/advisories/GHSA-83xr-5xxr-mh92
 CVE-2026-33898 (Incus is a system container and virtual machine manager. Prior to vers ...)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[31 Mar 2026] DSA-6188-1 lxd - security update
+	{CVE-2026-28384 CVE-2026-33542 CVE-2026-33897}
+	[bookworm] - lxd 5.0.2-5+deb12u4
+	[trixie] - lxd 5.0.2+git20231211.1364ae4-9+deb13u4
 [29 Mar 2026] DSA-6187-1 php-phpseclib3 - security update
 	{CVE-2026-32935}
 	[bookworm] - php-phpseclib3 3.0.19-1+deb12u4


=====================================
data/dsa-needed.txt
=====================================
@@ -51,9 +51,6 @@ linux (carnil)
   Wait until more issues have piled up, though try to regulary rebase for point
   releases to more 6.1.y versions
 --
-lxd (jmm)
-  Maintainer posted debdiffs for review
---
 mbedtls/oldstable
 --
 netty



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5c5ba5fd5050363447e8899b09398afc1ba0141

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5c5ba5fd5050363447e8899b09398afc1ba0141
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260331/c713333b/attachment-0001.htm>