Debian released security updates for LXD. Two vulnerabilities (CVE-2026-23953, CVE-2026-23954) can execute arbitrary commands via malformed images.
Part of the PlainSec briefing for 2026-03-01