Debian GNU/Linux
OS · products/debian.yaml · RSS
Latest 13.7 Sep 12, 2026
Latest per track
| Track | Latest | Released |
|---|---|---|
| 13 (trixie) | 13.7 | Sep 12, 2026 |
| 12 (bookworm) | 12.15 | Jul 11, 2026 |
| 11 (bullseye) | 11.11 | Aug 31, 2024 |
| 10 (buster) | 10.13 | Sep 10, 2022 |
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 13 (Trixie) | 13.7 | Aug 9, 2025 | Jun 30, 2030 · maintained |
| 12 (Bookworm) | 12.15 | Jun 10, 2023 | Jun 30, 2028 · maintained |
| 11 (Bullseye) | 11.11 | Aug 14, 2021 | Aug 31, 2026 · ended |
| 10 (Buster) | 10.13 | Jul 6, 2019 | Jun 30, 2024 · ended |
| 9 (Stretch) | 9.13 | Jun 17, 2017 | Jul 1, 2022 · ended |
| 8 (Jessie) | 8.11 | Apr 25, 2015 | Jun 30, 2020 · ended |
| 7 (Wheezy) | 7.11 | May 4, 2013 | May 31, 2018 · ended |
| 6 (Squeeze) | 6.0.10 | Feb 6, 2011 | Feb 29, 2016 · ended |
| 5 (Lenny) | 5.0.10 | Feb 14, 2009 | Feb 6, 2012 · ended |
| 4 (Etch) | 4.0r9 | Apr 8, 2007 | Feb 15, 2010 · ended |
| 3.1 (Sarge) | 3.1r8 | Jun 6, 2005 | Mar 31, 2008 · ended |
| 3.0 (Woody) | 3.0r6 | Jul 19, 2002 | Jun 30, 2006 · ended |
| 2.2 (Potato) | 2.2r7 | Aug 15, 2000 | Jun 30, 2003 · ended |
| 2.1 (Slink) | 2.1r5 | Mar 9, 1999 | Oct 30, 2000 · ended |
| 2.0 (Hamm) | 2.0r5 | Jul 24, 1998 | Feb 15, 1999 · ended |
| 1.3 (Bo) | 1.3.1 r.6 | Jul 2, 1997 | Dec 8, 1998 · ended |
| 1.2 (Rex) | 1.2 | Dec 12, 1996 | Oct 23, 1997 · ended |
| 1.1 (Buzz) | 1.1 | Jun 17, 1996 | Dec 12, 1996 · ended |
Recent releases
security92 security advisories included: DSA-6381 linux-signed-amd64 +2, DSA-6382 postfix, DSA-6383 imagemagick, DSA-6385 pgextwlist, DSA-6386 opam, DSA-6387 chromium, DSA-6388 libxfont, DSA-6389 ntfs-3g, DSA-6390 chromium, DSA-6391 roundcube, DSA-6392 tiff, DSA-6393 linux-signed-amd64 +2, …
securityalsa-lib: Fix heap overflow issue [CVE-2026-25068]
securityansible-core: New upstream stable release; fix arbitrary code injection issue [CVE-2026-11332]
security109 security advisories included: DSA-6250 chromium, DSA-6256 php8.4, DSA-6266 nghttp2, DSA-6267 thunderbird, DSA-6268 ffmpeg, DSA-6270 postgresql-17, DSA-6271 gsasl, DSA-6273 chromium, DSA-6274 linux-signed-amd64 +2, DSA-6277 openjpeg2, DSA-6278 nginx, DSA-6279 redis, DSA-6280 netatalk, …
securityapache2: Fix use-after-free issues [CVE-2026-29167 CVE-2026-48913]; fix cross-site scripting issue [CVE-2026-29170]; fix buffer overflow issues [CVE-2026-34355 CVE-2026-34356 CVE-2026-42536]; fix denial of service issues [CVE-2026-42535 CVE-2026-44186 CVE-2026-49975]; fix out of bounds read issues…
securitybeets: Fix XSS vulnerability [CVE-2026-42052]
security96 security advisories included: DSA-6088 php8.4, DSA-6158 imagemagick, DSA-6160 netty, DSA-6161 multipart, DSA-6162 linux-signed-amd64 +2, DSA-6164 chromium, DSA-6165 chromium, DSA-6166 nodejs, DSA-6167 gst-plugins-base1.0, DSA-6168 freetype, DSA-6169 imagemagick, DSA-6170 snapd, …
security389-ds-base: Fix heap overflow issue [CVE-2025-14905]
securityapache2: New upstream stable release; fix use-after-free issue [CVE-2026-23918]; fix privilege escalation issue [CVE-2026-24072]; fix NULL pointer dereference issues [CVE-2026-29169 CVE-2026-33007]; fix authentication bypass issue [CVE-2026-33006]; fix HTTP response splitting issue…
security62 security advisories included: DSA-6054 firefox-esr, DSA-6078 firefox-esr, DSA-6093 gimp, DSA-6094 libsodium, DSA-6095 foomuuri, DSA-6096 vlc, DSA-6097 chromium, DSA-6098 net-snmp, DSA-6099 python-parsl, DSA-6100 chromium, DSA-6101 firefox-esr, DSA-6102 python-urllib3, …
securityarduino-core-avr: New upstream stable release; fix buffer overflow issue [CVE-2025-69209]
securityaugeas: Fix null pointer dereference issue [CVE-2025-2588]
security36 security advisories included: DSA-6041 strongswan, DSA-6051 incus, DSA-6052 rust-sudo-rs, DSA-6055 chromium, DSA-6056 keystone +1, DSA-6058 lasso, DSA-6059 thunderbird, DSA-6060 chromium, DSA-6061 tryton-sao, DSA-6062 pdfminer, DSA-6063 kdeconnect, DSA-6064 tryton-server, …
securityapache2: New upstream stable release; fix integer overflow issue [CVE-2025-55753]; don't pass querystring to #exec directives [CVE-2025-58098]; fix improper parsing of environment variables [CVE-2025-65082]; fix mod_userdir+suexec bypass issue [CVE-2025-66200]
securitycalibre: Fix FB2 embedded binary handling in conversion plugin [CVE-2025-64486]
security52 security advisories included: DSA-5979 libxslt, DSA-5993 chromium, DSA-5994 shibboleth-sp, DSA-5995 hsqldb1.8.0, DSA-5996 chromium, DSA-5997 imagemagick, DSA-5998 cups, DSA-5999 libjson-xs-perl, DSA-6000 libcpanel-json-xs-perl, DSA-6001 cjson, DSA-6002 node-sha.js, …
security7zip: New upstream release; security fixes [CVE-2025-55188 CVE-2025-11002 CVE-2025-11001]
securitycurl: Fix buffer over-read issue [CVE-2025-9086]; fix cache poisoning issue [CVE-2025-10148]; fix path traversal issue [CVE-2025-11563]; allow --output to be overridden by --curl-options; fix manpage example for continue-at; fix path traversal issue [CVE-2025-11563]
security14 security advisories included: DSA-5975 linux-signed-amd64 +2, DSA-5976 chromium, DSA-5977 aide, DSA-5978 webkit2gtk, DSA-5979 libxslt, DSA-5980 firefox-esr, DSA-5981 chromium, DSA-5983 qemu, DSA-5984 thunderbird, DSA-5986 node-cipher-base, DSA-5988 chromium, DSA-5989 udisks2, …
securityfirebird3.0: Fix null pointer dereference in XDR message parsing [CVE-2025-54989]
securitygit: New upstream bug-fix release; fix arbitrary file write issues [CVE-2025-27613 CVE-2025-46835]; fix code execution issues [CVE-2025-27614 CVE-2025-48384]; fix protocol injection issue, possibly leading to arbitrary code execution [CVE-2025-48385]
security84 security advisories included: DLA-4627 kernel-wedge, DLA-4628 linux-base, DLA-4632 atril, DLA-4633 libreoffice, DLA-4635 firefox-esr, DLA-4636 thunderbird, DLA-4637 libconfig-inifiles-perl, DLA-4638 libgd-perl, DLA-4639 libhttp-daemon-perl, DLA-4642 u-boot, DLA-4643 imagemagick, …
security7zip: New upstream stable release; fix buffer overflow issues [CVE-2026-48092 CVE-2026-48095]; fix memory disclosure issue [CVE-2026-48101]; fix out-of-bounds read issues [CVE-2026-48102 CVE-2026-48103 CVE-2026-48111 CVE-2026-48112]; fix uninitialised memory read issue [CVE-2026-48104]
securityapache2: Fix HTTP/2 request DoS and file handle exhaustion [CVE-2026-49975 CVE-2026-48913]; fix proxy, DAV, LDAP, SSL, XML and header memory/crash issues [CVE-2026-29167 CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 CVE-2026-44185]; fix proxy FTP directory listing XSS…
security131 security advisories included: DSA-6003 firefox-esr, DSA-6025 firefox-esr, DSA-6054 firefox-esr, DSA-6078 firefox-esr, DSA-6093 gimp, DSA-6094 libsodium, DSA-6096 vlc, DSA-6097 chromium, DSA-6098 net-snmp, DSA-6100 chromium, DSA-6101 firefox-esr, DSA-6102 python-urllib3, …
security7zip: New upstream stable release; fix integer underflow issue [CVE-2023-31102]; fix code execution issues [CVE-2023-40481 CVE-2025-11001 CVE-2025-11002]; fix denial of service issue [CVE-2024-11612]; fix null pointer dereference issue [CVE-2025-53817]; fix handling of symbolic links…
securityapache2: New upstream release: fix http2 regression; fix use-after-free issue [CVE-2026-23918]; fix privilege escalation issue [CVE-2026-24072]; fix NULL pointer dereference issues [CVE-2026-29169 CVE-2026-33007]; fix authentication bypass issue [CVE-2026-33006]; fix HTTP response splitting issue…
security77 security advisories included: DSA-5979 libxslt, DSA-5993 chromium, DSA-5994 shibboleth-sp, DSA-5996 chromium, DSA-5997 imagemagick, DSA-5998 cups, DSA-5999 libjson-xs-perl, DSA-6000 libcpanel-json-xs-perl, DSA-6001 cjson, DSA-6002 node-sha.js, DSA-6003 firefox-esr, DSA-6004 chromium, …
securityangular.js: Fix regular expression-based denial of service issues [CVE-2022-25844 CVE-2023-26116 CVE-2023-26117 CVE-2023-26118]; fix restriction bypass issues [CVE-2024-8372 CVE-2024-8373]; fix denial of service issue [CVE-2024-21490]; fix improper sanitization issues [CVE-2025-0716 CVE-2025-2336]
securityapache2: New upstream stable release; fix integer overflow issue [CVE-2025-55753]; don't pass querystring to #exec directives [CVE-2025-58098]; fix improper parsing of environment variables [CVE-2025-65082]; fix mod_userdir+suexec bypass issue [CVE-2025-66200]
security75 security advisories included: DSA-5914 chromium, DSA-5916 chromium, DSA-5918 varnish, DSA-5919 open-vm-tools, DSA-5920 chromium, DSA-5921 thunderbird, DSA-5922 firefox-esr, DSA-5923 net-tools, DSA-5924 intel-microcode, DSA-5925 linux-signed-amd64 +3, DSA-5926 firefox-esr, …
securityamd64-microcode: Update AMD-SEV firmware [CVE-2024-56161]; update included microcode
securityapache2: New upstream stable release; fix HTTP response splitting issue [CVE-2024-42516]; fix server-side request forgery issue [CVE-2024-43204 CVE-2024-43394]; fix log injection issue [CVE-2024-47252]; fix access control bypass issue [CVE-2025-23048]; fix denial of service issue [CVE-2025-49630];…
security39 security advisories included: DSA-5877 chromium, DSA-5878 php8.2, DSA-5879 opensaml, DSA-5880 freetype, DSA-5881 rails, DSA-5882 chromium, DSA-5883 mercurial, DSA-5884 libxslt, DSA-5885 webkit2gtk, DSA-5886 ruby-rack, DSA-5887 exim4, DSA-5888 ghostscript, DSA-5889 firefox-esr, …
securityabseil: Fix heap buffer overflow issue [CVE-2025-0838]; fix build failure on ppc64el
securityfig2dev: Reject huge pattern lengths [CVE-2025-31162]; reject arcs with co-incident points [CVE-2025-31163]; allow an arc-box with zero radius [CVE-2025-31164]
security40 security advisories included: DSA-5834 chromium, DSA-5836 xen, DSA-5839 firefox-esr, DSA-5840 chromium, DSA-5841 thunderbird, DSA-5842 openafs, DSA-5843 rsync, DSA-5844 chromium, DSA-5845 tomcat10, DSA-5846 libreoffice, DSA-5847 snapcast, DSA-5848 chromium, DSA-5849 git-lfs, …
security389-ds-base: Fix crash when modifying userPassword using malformed input [CVE-2024-2199 CVE-2024-8445]; prevent denial of service while attempting to log in with a user with a malformed hash in their password [CVE-2024-5953]; prevent denial of service on the directory server with specially-crafted…
securitycurl: Fix unintended HTTPS upgrades or premature reversion to HTTP when both subdomains and parent domains are used [CVE-2024-9681]; prevent stopping of stunnel before retries in the built-time tests; fix possible credentials leakage issues [CVE-2024-11053 CVE-2025-0167]; fix test failures due to…
security35 security advisories included: DSA-5801 firefox-esr, DSA-5803 thunderbird, DSA-5804 webkit2gtk, DSA-5805 guix, DSA-5806 libarchive, DSA-5807 nss, DSA-5808 ghostscript, DSA-5809 symfony, DSA-5810 chromium, DSA-5811 mpg123, DSA-5812 postgresql-15, DSA-5813 symfony, DSA-5814 thunderbird, …
securityansible-core: New upstream stable release; fix arbitrary code execution issue [CVE-2024-11079]; fix information disclosure issue [CVE-2024-8775]; fix file overwrite issue [CVE-2024-9902]; fix test failure
securityaudiofile: Fix null pointer dereference issue [CVE-2019-13147]; fix information leak issue [CVE-2022-24599]
security47 security advisories included: DSA-5729 apache2, DSA-5733 thunderbird, DSA-5744 thunderbird, DSA-5758 trafficserver, DSA-5759 python3.11, DSA-5760 ghostscript, DSA-5761 chromium, DSA-5762 webkit2gtk, DSA-5763 pymatgen, DSA-5764 openssl, DSA-5765 firefox-esr, DSA-5766 chromium, …
security7zip: Fix heap buffer overflow in NTFS handler [CVE-2023-52168]; fix out-of-bounds read in NTFS handler [CVE-2023-52169]
securityamanda: Update incomplete fix for CVE-2022-37704, restoring operation with xfsdump
Security advisories
No advisories in the feed yet.
Sources
- rss https://www.debian.org/News/news
- html https://www.debian.org/News/2026/
- html https://www.debian.org/News/2025/
- html https://www.debian.org/News/2024/
- html https://www.debian.org/News/2023/
- html https://chronicles.debian.org/www/News/2022/
- html https://chronicles.debian.org/www/News/2021/
- debian https://security-tracker.debian.org/tracker/
- endoflife https://endoflife.date/debian