Debian GNU/Linux 12.12 → 13.7

10 releases · 0 breaking changes · 348 security fixes · 0 advisories fixed

348security0breaking0deprecated0feature52fix

Is 12.12 affected?

Breaking changes

None in the release notes.

Security changes

security 92 security advisories included: DSA-6381 linux-signed-amd64 +2, DSA-6382 postfix, DSA-6383 imagemagick, DSA-6385 pgextwlist, DSA-6386 opam, DSA-6387 chromium, DSA-6388 libxfont, DSA-6389 ntfs-3g, DSA-6390 chromium, DSA-6391 roundcube, DSA-6392 tiff, DSA-6393 linux-signed-amd64 +2, … in 13.7
security alsa-lib: Fix heap overflow issue [CVE-2026-25068] in 13.7
security ansible-core: New upstream stable release; fix arbitrary code injection issue [CVE-2026-11332] in 13.7
security bettercap: Fix mysql.server module remote DoS via crafted client handshake [CVE-2026-8276]; stop installing systemd service by default in 13.7
security binwalk: Fix path traversal issue [CVE-2026-7179] in 13.7
security cyrus-imapd: Allow JMAP EventSource without WebSocket/wslay; fix insufficient access check issues [CVE-2026-47084 CVE-2026-47086 CVE-2026-47087 CVE-2026-47081 CVE-2026-47089 CVE-2026-47085 CVE-2026-47083 CVE-2026-47082]; fix out of bounds read issue [CVE-2026-47088] in 13.7
security dcmtk: Fix denial of service issues [CVE-2026-35505 CVE-2026-44628 CVE-2026-50254]; fix path traversal issues [CVE-2026-50003 CVE-2026-52868] in 13.7
security dhcpcd: Fix IPv6 Neighbor Discovery option parsing to discard advertisements with zero-length options [CVE-2026-14258] in 13.7
security dnsmasq: Fix buffer overflow issue [CVE-2026-12725]; fix out of bounds read issue [CVE-2026-12969] in 13.7
security flask: Ensure Vary: Cookie is set on session access [CVE-2026-27205] in 13.7
security fluidsynth: Fix buffer overflow issues [CVE-2026-58264 CVE-2026-61714] in 13.7
security glib2.0: Fix out of bounds access issues [CVE-2026-58010 CVE-2026-58011 CVE-2026-58012 CVE-2026-58013 CVE-2026-58014]; fix file content disclosure issue [CVE-2026-58015]; fix denial of service issue [CVE-2026-15588]; fix integer underflow issue [CVE-2026-58016]; fix out of bounds write issue… in 13.7
security glibc: Fix buffer overflow/underflow issues [CVE-2026-5928 CVE-2026-5450]; ensure compatibility with linux 7.0 headers in 13.7
security goaccess: Fix out of bounds write issue [CVE-2026-54715]; fix denial of service issue [CVE-2026-55768 CVE-2026-55777] in 13.7
security gpsd: Fix gpsprof command and code injection in gnuplot script generation [CVE-2026-58459 CVE-2026-60122] in 13.7
security gzip: Fix insecure temporary file handling issue [CVE-2026-41991]; fix buffer overflow issue [CVE-2026-41992] in 13.7
security imagemagick: Fix buffer overflow issues [CVE-2026-56362 CVE-2026-56372 CVE-2026-56374 CVE-2026-61464]; fix memory leak issues [CVE-2026-56366 CVE-2026-56375 CVE-2026-61863 CVE-2026-61864 CVE-2026-61865 CVE-2026-61866 CVE-2026-61867 CVE-2026-61868 CVE-2026-61869 CVE-2026-61870 CVE-2026-61871… in 13.7
security incus: Fix path traversal issue [CVE-2026-81500]; fix insufficent access check issue [CVE-2026-81501] in 13.7
security libhttp-tiny-perl: Fix CRLF validation issue [CVE-2026-7010]; fix credential forwarding on redirects issue [CVE-2026-7017] in 13.7
security libio-compress-perl: Fix header parsing issue [CVE-2025-15649]; fix denial of service issue [CVE-2026-48959]; fix crash in zipdetails [CVE-2026-48961]; fix code execution issue [CVE-2026-48962] in 13.7
security libmongocrypt: Fix missing input validation issue [CVE-2026-81523] in 13.7
security libnet-cidr-set-perl: Fix IPv4/IPv6 CIDR parsing validation [CVE-2026-49940 CVE-2026-49941 CVE-2026-49942] in 13.7
security libnfs: Fix integer overflow [CVE-2026-53689] in 13.7
security libraw: Fix out of bounds read issue [CVE-2026-5342]; fix integer overflow issues [CVE-2026-20884 CVE-2026-24450]; fix buffer overflow issues [CVE-2026-20889 CVE-2026-21413 CVE-2026-24660] in 13.7
security libsdl2-image: Fix out of bounds read issue [CVE-2026-35444]; improve parser robustness in 13.7
security libsdl3-image: Fix out of bounds read issue [CVE-2026-35444]; improve parser robustness in 13.7
security libsocket-perl: Fix out of bounds read issue [CVE-2026-12087] in 13.7
security libssh2: Fix buffer overflow issues [CVE-2026-58050 CVE-2026-66035 CVE-2026-58051]; fix double free issue [CVE-2026-66032]; fix integer underflow issue [CVE-2026-66033]; fix data leak issue [CVE-2026-66034] in 13.7
security libvirt: Fix buffer overflow issue [CVE-2026-18917]; fix record injection issue [CVE-2026-61477]; fix denial of service issue [CVE-2026-61478]; fix privilege escalation issue [CVE-2026-63622]; fix information disclosure issue [CVE-2026-63623] in 13.7
security libwebsockets: Fix denial of service issue [CVE-2026-10650]; fix out of bounds write issue [CVE-2026-78161] in 13.7
security lwip: Fix SNMPv3 authentication buffer overflow [CVE-2026-8836] in 13.7
security mbedtls: Fix signature algorithm injection issue [CVE-2026-25834]; fix PSA random generator cloning issue [CVE-2026-25835]; fix improper validation issue [CVE-2026-34872]; fix client impersonation issue [CVE-2026-34873]; fix NULL pointer dereference issue [CVE-2026-34874]; fix buffer overflow… in 13.7
security mongo-c-driver: Fix missing input validation issue [CVE-2026-81524] in 13.7
security mrtg: Fix privilege escalation issue [CVE-2026-72694] in 13.7
security node-lodash: Fix prototype pollution issues [CVE-2025-13465 CVE-2025-13465]; validate imports keys in _.template [CVE-2026-4800] in 13.7
security onionshare: Prevent writing files in Receive mode when file uploads are disabled [CVE-2026-54707]; Prevent empty folder from being created when no file is uploaded [CVE-2026-54706] in 13.7
security opencryptoki: Fix privilege escalation issue [CVE-2026-23893]; fix out of bounds read issue [CVE-2026-40253] in 13.7
security patool: Fix path traversal vulnerability [CVE-2026-29509] in 13.7
security perl: Fix credential forwarding on redirects issue [CVE-2026-7017]; fix symlink extraction issue [CVE-2026-42496]; fix hardlink extraction issue [CVE-2026-42497]; fix out of bounds read issues [CVE-2026-12087 CVE-2026-57432]; fix incorrect regular expression match issue [CVE-2026-13221]; fix… in 13.7
security php-guzzlehttp-psr7: Fix CRLF injection in HTTP start-line parsing [CVE-2026-55766] in 13.7
security 109 security advisories included: DSA-6250 chromium, DSA-6256 php8.4, DSA-6266 nghttp2, DSA-6267 thunderbird, DSA-6268 ffmpeg, DSA-6270 postgresql-17, DSA-6271 gsasl, DSA-6273 chromium, DSA-6274 linux-signed-amd64 +2, DSA-6277 openjpeg2, DSA-6278 nginx, DSA-6279 redis, DSA-6280 netatalk, … in 13.6
security apache2: Fix use-after-free issues [CVE-2026-29167 CVE-2026-48913]; fix cross-site scripting issue [CVE-2026-29170]; fix buffer overflow issues [CVE-2026-34355 CVE-2026-34356 CVE-2026-42536]; fix denial of service issues [CVE-2026-42535 CVE-2026-44186 CVE-2026-49975]; fix out of bounds read issues… in 13.6
security beets: Fix XSS vulnerability [CVE-2026-42052] in 13.6
security calibre: Fix unsafe e-book extraction and resource path handling [CVE-2026-30853 CVE-2026-33206]; prevent e-book viewer local file reads and SSRF/exfiltration [CVE-2026-33205]; avoid unsafe catalog rule evaluation; correct XPath and SQL query handling; fix reader-background endpoint path… in 13.6
security ckermit: Block remote control of the local kermit by default [CVE-2025-68920]; disable unnecessary OpenSSL version check in 13.6
security composer: Fix support for new GitHub token format [CVE-2026-45793] in 13.6
security curl: Fix bearer token redirect leaks [CVE-2025-14524 CVE-2026-3783]; correct OpenSSL CA cache reuse [CVE-2025-14819]; fix HTTP Negotiate and proxy connection reuse [CVE-2026-1965 CVE-2026-3784 CVE-2026-5545]; prevent clear-text STARTTLS connection reuse [CVE-2026-4873]; fix SMB use-after-free and… in 13.6
security dcmtk: Fix NULL pointer dereference issues [CVE-2022-4981 CVE-2025-14841]; fix memory corruption issues [CVE-2025-2357 CVE-2025-9732 CVE-2025-14607]; fix command injection issue [CVE-2026-5663]; fix buffer overflow issues [CVE-2026-10194 CVE-2026-12805] in 13.6
security debusine: Enforce file upload permissions; restrict artifact relation creation/deletion [CVE-2026-11852]; harden sbuild repository command quoting; reject unsafe .dsc/.changes checksum paths [CVE-2026-11853] in 13.6
security deepdiff: Fix class pollution issue [CVE-2025-58367]; fix denial of service issue [CVE-2026-33155] in 13.6
security dhcpcd: Fix memory safety issues [CVE-2025-70102 CVE-2026-56113 CVE-2026-56114]; fix IPv6 Router Advertisement information leakage [CVE-2026-56116]; correct control socket lifetime handling [CVE-2026-56117] in 13.6
security dolphin: Fix sandbox escape issue [CVE-2026-41525] in 13.6
security errands: Fix verification of TLS certificates for CalDAV servers [CVE-2025-71063] in 13.6
security gdown: Fix arbitray file write issue [CVE-2026-40491] in 13.6
security giflib: Fix memory corruption issues [CVE-2026-23868 CVE-2026-26740] in 13.6
security gimp: Fix integer overflow issues [CVE-2026-4154 CVE-2026-40915] in 13.6
security graphite2: Fix out-of-bounds write [CVE-2026-50593] in 13.6
security ironic: Fix credential forwarding from configuration molds [CVE-2026-42997]; fix IPMI console command injection [CVE-2026-42510]; sandbox kickstart template rendering [CVE-2026-44916]; prevent conductor thread exhaustion from file special devices [CVE-2026-44919]; restrict unsafe file image paths;… in 13.6
security isc-kea: Fix denial of service issue [CVE-2026-3608] in 13.6
security keystone: Fix behaviour of user_enabled_invert [CVE-2026-40683]; prevent unauthorized EC2 credential creation and deletion [CVE-2026-33551] in 13.6
security libapache-session-browseable-perl: Improve entropy source [CVE-2026-8503] in 13.6
security libbytes-random-secure-perl: Fix incorrect usage of seed in PRNG [CVE-2026-11625] in 13.6
security libcaca: Prevent undefined behaviour in overflow check [CVE-2026-42046] in 13.6
security libcrypt-pbkdf2-perl: Change default hash algorithm to HMAC-SHA256 and default iterations to 600,000 [CVE-2026-9641]; generate salts using Crypt::URandom [CVE-2026-9638]; use a constant-time comparison in validate to avoid timing attacks [CVE-2017-20240] in 13.6
security libcrypt-urandom-perl: Fix buffer overflow issue [CVE-2026-2474] in 13.6
security libhtml-parser-perl: Fix heap-use-after-free in _decode_entities [CVE-2026-8829] in 13.6
security libnet-cidr-lite-perl: Fix IP/CIDR parser validation: reject non-ASCII digits and trailing newlines [CVE-2026-55190]; reject zero-padded CIDR masks [CVE-2026-45191] in 13.6
security libslirp: Fix memory disclosure issue [CVE-2026-9539] in 13.6
security libtasn1-6: Fix buffer overflow issue [CVE-2025-13151] in 13.6
security libvncserver: Fix buffer overflow and out-of-bounds write [CVE-2026-44988 CVE-2026-50538] in 13.6
security libxml-libxml-perl: Fix out-of-bounds read [CVE-2026-8177] in 13.6
security libxml2: Fix RelaxNG include recursion limits [CVE-2026-0989]; prevent XML and SGML catalog recursion/resource exhaustion [CVE-2025-8732 CVE-2026-0990 CVE-2026-0992]; fix xmllint shell memory leak [CVE-2026-1757]; correct XML writer and Schematron error-path leaks; avoid RelaxNG validation… in 13.6
security libxpm: Fix out of bounds read issue [CVE-2026-4367] in 13.6
security lxml-html-clean: Fix filter bypass issue [CVE-2026-28348]; fix tag injection issue [CVE-2026-28350] in 13.6
security mesa: Fix WebGPU/SPIR-V allocation handling [CVE-2026-40393] in 13.6
security miniupnpd: Fix integer underflow issue [CVE-2026-5720] in 13.6
security modsecurity: Prevent denial of service in hexDecode handling [CVE-2026-30923]; prevent denial of service in SSN/CPF/SVNR verification [CVE-2026-42268] in 13.6
security mutt: Fix buffer truncation issues [CVE-2026-43859 CVE-2026-43860 CVE-2026-43861]; fix mishandling of imap_auth_gss security level [CVE-2026-43862]; fix denial of service issue [CVE-2026-43863]; fix NULL pointer dereference issue [CVE-2026-43864] in 13.6
security mxml: Fix out-of-bounds read [CVE-2026-5037] in 13.6
security nbconvert: Fix arbitrary file read/write issues [CVE-2026-39377 CVE-2026-39378] in 13.6
security 96 security advisories included: DSA-6088 php8.4, DSA-6158 imagemagick, DSA-6160 netty, DSA-6161 multipart, DSA-6162 linux-signed-amd64 +2, DSA-6164 chromium, DSA-6165 chromium, DSA-6166 nodejs, DSA-6167 gst-plugins-base1.0, DSA-6168 freetype, DSA-6169 imagemagick, DSA-6170 snapd, … in 13.5
security 389-ds-base: Fix heap overflow issue [CVE-2025-14905] in 13.5
security apache2: New upstream stable release; fix use-after-free issue [CVE-2026-23918]; fix privilege escalation issue [CVE-2026-24072]; fix NULL pointer dereference issues [CVE-2026-29169 CVE-2026-33007]; fix authentication bypass issue [CVE-2026-33006]; fix HTTP response splitting issue… in 13.5
security awstats: Prevent command injection [CVE-2025-63261] in 13.5
security black: Fix arbitrary file write issue [CVE-2026-32274] in 13.5
security bubblewrap: Fix privilege escalation issue [CVE-2026-41163] in 13.5
security calibre: Fix path traversal issues [CVE-2026-25635 CVE-2026-25636 CVE-2026-26064 CVE-2026-26065]; fix code execution issue [CVE-2026-25731]; fix HTTP response header injection issue [CVE-2026-27810]; fix IP ban bypass issue [CVE-2026-27824] in 13.5
security cimg: Fix overflow issue [CVE-2026-42144]; fix out of memory issue with crafted files [CVE-2026-42146] in 13.5
security cockpit: Fix code execution issue [CVE-2026-4631] in 13.5
security composer: Fix command injection issues [CVE-2026-40261 CVE-2026-40176] in 13.5
security curl: Fix server certificate verification issue [CVE-2025-13034] in 13.5
security dovecot: Fix memory leak in CVE-2026-27857 fix in 13.5
security erlang: Fix path traversal issues [CVE-2026-21620 CVE-2026-23942[; fix HTTP request smuggling issue [CVE-2026-23941]; fix denial of service issue [CVE-2026-23943] in 13.5
security exim4: Fix GnuTLS hostname verify of a server certificate with a zero-length Subject; fix denial of service issue [CVE-2026-40684]; fix out-of-bounds read/write issues [CVE-2026-40685 CVE-2026-40686 CVE-2026-40687] in 13.5
security firewalld: Prevent local users from being able to modify runtime firewall state without prior authentication if the desktop policy is active [CVE-2026-4948] in 13.5
security freerdp3: Fix issues with large certificates; fix clipboard paste issue; fix segmentation fault issue [CVE-2025-4478]; fix use-after-free issues [CVE-2026-22851 CVE-2026-22856 CVE-2026-22857 CVE-2026-23883 CVE-2026-23884 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24678 CVE-2026-24680… in 13.5
security git-lfs: Fix arbitrary file write issue [CVE-2025-26625] in 13.5
security glance: Fix server-side request forgery issue [CVE-2026-34881]; fix build failure in 13.5
security glib2.0: Fix timezone handling with Debian & Ubuntu's symlinks; fix missing input validation in g_buffered_input_stream_peek [CVE-2026-0988]; fix integer overflow in base64 encoding [CVE-2026-1484]; fix buffer underflow issue in content type parsing [CVE-2026-1485]; fix integer overflow in unicode… in 13.5
security glibc: Fix incorrect handling of DNS responses [CVE-2026-4437]; fix return of invalid DNS hostnames [CVE-2026-4438]; fix assertion failure [CVE-2026-4046]; fix a null pointer dereference in the nss_database_check_reload_and_get function; fix invalid pointer arithmetic in ANSI_X3.110 iconv module;… in 13.5
security gvfs: Use control connection address for PASV data [CVE-2026-28295]; reject paths containing CR/LF characters [CVE-2026-28296] in 13.5
security harfbuzz: Fix NULL pointer dereference issue [CVE-2026-22693] in 13.5
security jpeg-xl: Fix uninitialised memory read issues [CVE-2025-12474 CVE-2026-1837]; fix cross build failure; fix nojava build profile; fix build on big-endian architectures in 13.5
security jq: Fix buffer overflow issue [CVE-2026-32316]; fix denial of service issues [CVE-2026-33947 CVE-2026-39956]; fix validation bypass issue [CVE-2026-33948]; fix out-of-bounds read issue [CVE-2026-39979]; fix use of hardcoded seed [CVE-2026-40164] in 13.5
security kissfft: Fix integer overflow issues [CVE-2025-34297 CVE-2026-41445] in 13.5
security libarchive: Fix out-of-bounds read issues [CVE-2025-5918 CVE-2026-4424]; fix denial of service issues [CVE-2026-4111 CVE-2026-4426]; fix possible code execution issue [CVE-2026-5121] in 13.5
security libcap2: Fix time of check / time of use issue [CVE-2026-4878] in 13.5
security libcdio: Fix buffer overflow issue [CVE-2024-36600] in 13.5
security libcoap3: Fix out-of-bounds read issue [CVE-2026-29013]; fix buffer overflow issue [CVE-2025-34468] in 13.5
security libcryptx-perl: Fix Crypt::PK key generation is not fork safe and will generate identical keys [CVE-2026-41564] in 13.5
security libexif: Fix integer underflow issues [CVE-2026-40386 CVE-2026-32775]; fix integer overflow issue [CVE-2026-40385] in 13.5
security libnet-cidr-lite-perl: Fix ACL bypass issues [CVE-2026-40198 CVE-2026-40199] in 13.5
security libtext-csv-xs-perl: Fix stack corruption issue [CVE-2026-7111] in 13.5
security libvncserver: Fix out of bounds read issue [CVE-2026-32853]; fix NULL pointer dereference issue [CVE-2026-32854] in 13.5
security libxml-security-java: Fix private key disclosure issue [CVE-2023-44483] in 13.5
security lxc: Fix authorisation bypass issue [CVE-2026-39402] in 13.5
security mapserver: Fix buffer overflow issue [CVE-2026-33721] in 13.5
security modsecurity-crs: Fix file extension blocking bypass issue [CVE-2026-33691] in 13.5
security mongo-c-driver: Fix insufficient validation issues [CVE-2025-14911 CVE-2026-6231]; fix denial of service issue [CVE-2026-4359]; fix buffer overflow issue [CVE-2026-6691]; improve handling of corrupt GridFS files in 13.5
security musl: Fix denial of service issue [CVE-2026-6042]; fix stack corruption issue [CVE-2026-40200] in 13.5
security 62 security advisories included: DSA-6054 firefox-esr, DSA-6078 firefox-esr, DSA-6093 gimp, DSA-6094 libsodium, DSA-6095 foomuuri, DSA-6096 vlc, DSA-6097 chromium, DSA-6098 net-snmp, DSA-6099 python-parsl, DSA-6100 chromium, DSA-6101 firefox-esr, DSA-6102 python-urllib3, … in 13.4
security arduino-core-avr: New upstream stable release; fix buffer overflow issue [CVE-2025-69209] in 13.4
security augeas: Fix null pointer dereference issue [CVE-2025-2588] in 13.4
security capstone: New upstream stable release; fix buffer overflow issue [CVE-2025-67873]; fix buffer underflow and overflow issue [CVE-2025-68114] in 13.4
security civetweb: Fix denial of service issue [CVE-2025-9648]; fix buffer overflow issue [CVE-2025-55763] in 13.4
security direwolf: Fix stack buffer overflow [CVE-2025-34457] in 13.4
security dpkg: dpkg-query: Fix segfault with empty -S argument; Dpkg::OpenPGP: Do not run verify with no keyrings; Dpkg::Shlibs::Objdump::Object: Add support for Version References symbols; Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import; fix denial of service issue [CVE-2026-2219] in 13.4
security erlang: Fix excessive resource use issues [CVE-2025-48038 CVE-2025-48039 CVE-2025-48040 CVE-2025-48041]; fix traffic redirection issue [CVE-2016-1000107] in 13.4
security fluidsynth: Fix null pointer dereference issue [CVE-2025-56225] in 13.4
security fonttools: Fix arbitrary file write issue [CVE-2025-66034] in 13.4
security glibc: Update from upstream stable branch; fix heap corruption issue [CVE-2026-0861]; fix stack contents leak issue [CVE-2026-0915]; fix uninitialized memory use issue [CVE-2025-15281]; switch currency symbol for the bg_BG locale to euro; fix a null pointer dereference in symbol lookup when the… in 13.4
security gpsd: Fix out-of-bounds write issue [CVE-2025-67268]; fix denial of service issue [CVE-2025-67269] in 13.4
security jaraco.context: Prevent path traversal [CVE-2026-23949] in 13.4
security libpng1.6: Fix heap buffer overflow issues [CVE-2026-22801 CVE-2026-22695] in 13.4
security libsndfile: Fix memory leak issue [CVE-2025-56226] in 13.4
security mariadb: New upstream stable release; fix arbitrary code execution issue [CVE-2025-13699]; fix denial of service issue [CVE-CVE-2026-21968]; use tmpfiles.d to generate runtime directory; fix upgrades from version 10.4 when encryption is enabled; fix innodb_linux_aio support in 13.4
security node-proxy-agents: Fix path traversal issue [CVE-2026-27699] in 13.4
security openssh: Fix mistracking of MaxStartups process exits in some situations; fix possible code execution issues [CVE-2025-61984 CVE-2025-61985] in 13.4
security pcsx2: Fix code execution issue [CVE-2025-49589] in 13.4
security phpunit: Fix unsafe deserialization issue [CVE-2026-24765] in 13.4
security postgresql-17: New upstream stable release; fix buffer overrun issue [CVE-2026-2006] in 13.4
security python-cryptography: Fix missing validation in EC public key creation [CVE-2026-26007] in 13.4
security python-filelock: Fix TOCTOU symlink handling vulnerability in lock file creation [CVE-2025-68146] in 13.4
security python-multipart: Fix arbitrary file write issue [CVE-2026-24486] in 13.4
security qemu: New upstream stable release; fix denial of service issues [CVE-2025-14876 CVE-2026-0665] in 13.4
security requests: Fix credential leak issue [CVE-2024-47081] in 13.4
security rust-ntp-proto: Fix excessive load issue [CVE-2026-26076] in 13.4
security rust-ntpd: Rebuild with rust-ntp-proto 1.4.0-4+deb13u1 to fix CVE-2026-26076 in 13.4
security sqlite3: Prevent integer overflow in FTSS extension [CVE-2025-7709]; add missing build dependency on pkgconf in 13.4
security starlette: Fix denial of service issue [CVE-2025-62727] in 13.4
security suricata: Fix denial of service issues [CVE-2026-22258 CVE-2026-22259 CVE-2026-22261]; fix stack overflow issue [CVE-2026-22262]; fix heap overflow issue [CVE-2026-22264] in 13.4
security wget2: Fix file overwrite issue with metalink [CVE-2025-69194]; fix remote buffer overflow [CVE-2025-69195] in 13.4
security wireshark: New upstream stable release; fix USB HID dissector memory exhaustion [CVE-2026-3201]; fix RF4CE Profile dissector crash [CVE-2026-3203] in 13.4
security xen: New upstream stable release; fix buffer overrun issue [CVE-2025-58150]; fix incomplete vCPU isolation issue [CVE-2026-23553] in 13.4
security zabbix: New upstream stable release; fix data leakage issues [CVE-2025-27231 CVE-2025-27233 CVE-2025-27236 CVE-2025-27238 CVE-2025-49641]; fix denial of service issue [CVE-2025-49643] in 13.4
security 36 security advisories included: DSA-6041 strongswan, DSA-6051 incus, DSA-6052 rust-sudo-rs, DSA-6055 chromium, DSA-6056 keystone +1, DSA-6058 lasso, DSA-6059 thunderbird, DSA-6060 chromium, DSA-6061 tryton-sao, DSA-6062 pdfminer, DSA-6063 kdeconnect, DSA-6064 tryton-server, … in 13.3
security apache2: New upstream stable release; fix integer overflow issue [CVE-2025-55753]; don't pass querystring to #exec directives [CVE-2025-58098]; fix improper parsing of environment variables [CVE-2025-65082]; fix mod_userdir+suexec bypass issue [CVE-2025-66200] in 13.3
security calibre: Fix FB2 embedded binary handling in conversion plugin [CVE-2025-64486] in 13.3
security composer: Fix ANSI sequence injection [CVE-2025-67746] in 13.3
security cups-filters: Fix TIFF parser bounds/validation issues [CVE-2025-57812]; clamp oversized PDF MediaBox-derived page size in pdftoraster [CVE-2025-64503]; avoid rastertopclx infinite loop and heap overflow on crafted raster input [CVE-2025-64524] in 13.3
security edk2: Fix timing side-channel issue in ECDSA signature computation [CVE-2024-13176]; fix out-of-bounds memory access issue [CVE-2024-38805]; fix code execution issue [CVE-2025-3770] in 13.3
security freedombox: distupgrade: Handle comments in sources.list file; update trixie's release date; backups: Set proper permissions for backups-data directory [CVE-2025-68462] in 13.3
security glib2.0: Fix various integer overflow issues [CVE-2025-13601 CVE-2025-14087 CVE-2025-14512] in 13.3
security gnupg2: Avoid potential downgrade to SHA1 in 3rd party key signatures; error out on unverified output for non-detached signatures; fix possible memory corruption in the armor parser [CVE-2025-68973]; do not use a default when asking for another output filename; rebuild with updated glibc in 13.3
security gnutls28: Fix PKCS#11 token label bounds in gnutls_pkcs11_token_init [CVE-2025-9820]; initialise PKCS#11 modules in thread-safe mode with fallback in 13.3
security imagemagick: Fix denial of service issues [CVE-2025-62594 CVE-2025-68618]; fix use-after-free issue [CVE-2025-65955]; fix integer overflow issues [CVE-2025-66628 CVE-2025-69204]; fix infinite loop issue [CVE-2025-68950] in 13.3
security libcoap3: Fix configuration file parsing issue [CVE-2025-59391]; fix NULL pointer dereference issues [CVE-2025-65493 CVE-2025-65494 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65500 CVE-2025-65501]; fix integer signedness issue [CVE-2025-65495]; fix array index error issue [CVE-2025-65499] in 13.3
security libcupsfilters: Fix TIFF parser bounds/validation issues [CVE-2025-57812]; clamp oversized PDF MediaBox-derived page size in pdftoraster [CVE-2025-64503] in 13.3
security libphp-adodb: Fix SQL injection issue in sqlite(3) drivers [CVE-2025-54119] in 13.3
security libvirt: Perform ACL checks earlier, preventing malicious users from potentially being able to crash the daemon [CVE-2025-12748]; ensure that newly-created snapshots are not world-readable [CVE-2025-13193]; apply the detect_zeroes settings across all layers of the backing chain instead of just the… in 13.3
security lxd: Fix broken idmapping with kernel 6.9+; tighten storage pool volume permissions [CVE-2025-64507] in 13.3
security mbedtls: New upstream stable release; fix timing issues [CVE-2025-54764 CVE-2025-59438] in 13.3
security mongo-c-driver: Avoid invalid memory reads [CVE-2025-12119] in 13.3
security node-nodemailer: Fix addressparser recipient parsing for quoted nested addresses [CVE-2025-13033] in 13.3
security pgbouncer: Fix arbitary SQL execution issue [CVE-2025-12819] in 13.3
security postgresql-17: New upstream stable release; check for CREATE privileges on the schema in CREATE STATISTICS [CVE-2025-12817]; avoid integer overflow in allocation-size calculations within libpq [CVE-2025-12818] in 13.3
security qemu: New upstream stable release; fix use after free issue [CVE-2025-11234]; fix buffer overflow issue [CVE-2025-12464] in 13.3
security r-cran-gh: Fix exposure of request headers in returned response objects [CVE-2025-54956]; ensure pagination passes authentication context explicitly; update tests and documentation in 13.3
security rlottie: Fix outlying coordinate rejection in FreeType rasteriser [CVE-2025-0634 CVE-2025-53074 CVE-2025-53075] in 13.3
security rsync: Fix out-of-bounds read via negative array index in sender file list handling [CVE-2025-10158] in 13.3
security rust-sequoia-openpgp: Fix buffer underflow in aes_key_unwrap [CVE-2025-67897] in 13.3
security sogo: Fix cross-site scripting issues [CVE-2025-63498 CVE-2025-63499] in 13.3
security suricata: Fix verdict logging bounds checks [CVE-2025-64330]; fix various logging stack overflows [CVE-2025-64331 CVE-2025-64332 CVE-2025-64333 CVE-2025-64344] in 13.3
security symfony: Fix PATH_INFO parsing [CVE-2025-64500]; drop failing Finder testsuite data entries in 13.3
security 52 security advisories included: DSA-5979 libxslt, DSA-5993 chromium, DSA-5994 shibboleth-sp, DSA-5995 hsqldb1.8.0, DSA-5996 chromium, DSA-5997 imagemagick, DSA-5998 cups, DSA-5999 libjson-xs-perl, DSA-6000 libcpanel-json-xs-perl, DSA-6001 cjson, DSA-6002 node-sha.js, … in 13.2
security 7zip: New upstream release; security fixes [CVE-2025-55188 CVE-2025-11002 CVE-2025-11001] in 13.2
security curl: Fix buffer over-read issue [CVE-2025-9086]; fix cache poisoning issue [CVE-2025-10148]; fix path traversal issue [CVE-2025-11563]; allow --output to be overridden by --curl-options; fix manpage example for continue-at; fix path traversal issue [CVE-2025-11563] in 13.2
security dnsdist: Fix denial of service issues [CVE-2025-8671 CVE-2025-30187] in 13.2
security imagemagick: Fix integer overflow issue [CVE-2025-62171] in 13.2
security lemonldap-ng: Fix command injection issue [CVE-2025-59518]; don't expose session-id into Ajax responses; fix Google authentication in 13.2
security libcommons-lang-java: Fix an uncontrolled recursion issue [CVE-2025-48924] in 13.2
security libcommons-lang3-java: Fix an uncontrolled recursion issue [CVE-2025-48924] in 13.2
security libhtp: Prevent memory leak with lzma [CVE-2025-53537] in 13.2
security libsmb2: Fix buffer overflow issue [CVE-2025-57632] in 13.2
security libssh: Fix NULL pointer dereference issue [CVE-2025-8114]; fix denial of service issue [CVE-2025-8277] in 13.2
security libwebsockets: Fix denial of service issue [CVE-2025-11677]; fix buffer overflow issue [CVE-2025-11678] in 13.2
security libxml2: Fix XPath recursion depth DoS [CVE-2025-9714] in 13.2
security libyaml-syck-perl: Prevent memory corruption leading to str value being set on empty keys [CVE-2025-11683] in 13.2
security log4cxx: Fix improper escaping issues [CVE-2025-54812 CVE-2025-54813] in 13.2
security luksmeta: Fix data corruption issue with LUKS1 [CVE-2025-11568] in 13.2
security mapserver: Fix SQL injection issue [CVE-2025-59431] in 13.2
security modsecurity-apache: Fix security issues relating to response Content-Type handling [CVE-2025-54571] in 13.2
security nvidia-graphics-drivers-tesla-535: Fix use after free issue [CVE-2025-23280]; fix privilege escalation issue [CVE-2025-23282]; fix denial of service issues [CVE-2025-23300 CVE-2025-23330 CVE-2025-23332 CVE-2025-23345] in 13.2
security open-vm-tools: Disable (default) the execution of the SDMP get-versions.sh script [CVE-2025-41244] in 13.2
security phpmyadmin: Address XSS vulnerability in bundled jquery.validate.js [CVE-2025-3573] in 13.2
security poppler: Fix infinite recursion [CVE-2025-50420] in 13.2
security python-eventlet: Fix HTTP request smuggling by discarding HTTP chunk trailers [CVE-2025-58068] in 13.2
security qemu: New upstream stable release; fix denial of service issue [CVE-2024-8354]; fix wrong emulation of FIBMAP and FIGETBSZ ioctls in 13.2
security rabbitmq-server: Fix logging on sensitive data [CVE-2025-50200] in 13.2
security sail: Fix memory corruption issues [CVE-2025-32468 CVE-2025-35984 CVE-2025-46407 CVE-2025-50129 CVE-2025-52456 CVE-2025-52930 CVE-2025-53085 CVE-2025-53510] in 13.2
security samba: New upstream stable release; fix uninitialized memory disclosure issue [CVE-2025-9640], command injection issue [CVE-2025-10230] in 13.2
security suricata: Fix uncontrolled memory use issue [CVE-2025-53538]; fix detection bypass issue [CVE-2025-59147] in 13.2
security 14 security advisories included: DSA-5975 linux-signed-amd64 +2, DSA-5976 chromium, DSA-5977 aide, DSA-5978 webkit2gtk, DSA-5979 libxslt, DSA-5980 firefox-esr, DSA-5981 chromium, DSA-5983 qemu, DSA-5984 thunderbird, DSA-5986 node-cipher-base, DSA-5988 chromium, DSA-5989 udisks2, … in 13.1
security firebird3.0: Fix null pointer dereference in XDR message parsing [CVE-2025-54989] in 13.1
security git: New upstream bug-fix release; fix arbitrary file write issues [CVE-2025-27613 CVE-2025-46835]; fix code execution issues [CVE-2025-27614 CVE-2025-48384]; fix protocol injection issue, possibly leading to arbitrary code execution [CVE-2025-48385] in 13.1
security golang-github-gin-contrib-cors: Fix mishandling of wildcards [CVE-2019-25211] in 13.1
security imagemagick: Security fixes: heap buffer overflow in the InterpretImageFilename function [CVE-2025-53014]; infinite loop when writing during a specific XMP file conversion command [CVE-2025-53015]; memory leak in the magick stream command [CVE-2025-53019]; stack overflow through vsnprintf()… in 13.1
security iperf3: Fix buffer overflow issue [CVE-2025-54349]; fix assertion failure [CVE-2025-54350] in 13.1
security libcgi-simple-perl: Fix HTTP response splitting issue [CVE-2025-40927] in 13.1
security libcoap3: Fix buffer overflow issue [CVE-2024-0962]; fix integer overflow issue [CVE-2024-31031] in 13.1
security mozjs128: New upstream stable release; fix uninitialised memory issue [CVE-2025-9181], memory safety issues [CVE-2025-9185] in 13.1
security nginx: Fix potential information leak in ngx_mail_smtp_module [CVE-2025-53859] in 13.1
security node-tmp: Fix arbitrary file write issue [CVE-2025-54798] in 13.1
security openjpeg2: Fix out-of-bounds write issue [CVE-2025-54874] in 13.1
security pcre2: New upstream stable release; fix potential information disclosure issue [CVE-2025-58050] in 13.1
security postgresql-17: New upstream stable release; tighten security checks in planner estimation functions [CVE-2025-8713]; prevent pg_dump scripts from being used to attack the user running the restore [CVE-2025-8714]; convert newlines to spaces in names included in comments in pg_dump output… in 13.1
security shaarli: Fix cross site scripting issue [CVE-2025-55291] in 13.1
security wolfssl: Avoid weak and predictable random numbers [CVE-2025-7394] in 13.1
security 84 security advisories included: DLA-4627 kernel-wedge, DLA-4628 linux-base, DLA-4632 atril, DLA-4633 libreoffice, DLA-4635 firefox-esr, DLA-4636 thunderbird, DLA-4637 libconfig-inifiles-perl, DLA-4638 libgd-perl, DLA-4639 libhttp-daemon-perl, DLA-4642 u-boot, DLA-4643 imagemagick, … in 12.15
security 7zip: New upstream stable release; fix buffer overflow issues [CVE-2026-48092 CVE-2026-48095]; fix memory disclosure issue [CVE-2026-48101]; fix out-of-bounds read issues [CVE-2026-48102 CVE-2026-48103 CVE-2026-48111 CVE-2026-48112]; fix uninitialised memory read issue [CVE-2026-48104] in 12.15
security apache2: Fix HTTP/2 request DoS and file handle exhaustion [CVE-2026-49975 CVE-2026-48913]; fix proxy, DAV, LDAP, SSL, XML and header memory/crash issues [CVE-2026-29167 CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 CVE-2026-44185]; fix proxy FTP directory listing XSS… in 12.15
security beets: Fix XSS vulnerability [CVE-2026-42052]; fix build-time test failures in 12.15
security calibre: Fix various potential security issues; read resources only from book contents [CVE-2026-33206]; keep extracted files within container dir [CVE-2026-30853]; prevent reading background images from outside the config dir [CVE-2026-33205] in 12.15
security composer: Fix support for new GitHub token format [CVE-2026-45793] in 12.15
security curl: Fix cache poisoning issue [CVE-2025-10148]; fix data leak issues [CVE-2025-14524 CVE-2026-3783]; fix incorrect connection re-use issues [CVE-2025-14819 CVE-2026-3784 CVE-2026-5773 CVE-2026-7168] in 12.15
security dcmtk: Fix NULL pointer dereference issues [CVE-2022-4981 CVE-2025-14841]; fix memory corruption issues [CVE-2025-2357 CVE-2025-9732 CVE-2025-14607]; fix command injection issue [CVE-2026-5663]; fix buffer overflow issues [CVE-2026-10194 CVE-2026-12805] in 12.15
security dhcpcd5: Fix NULL pointer dereference issue [CVE-2025-70102]; fix out-of-bounds write issue [CVE-2026-56114] in 12.15
security firewalld: Fix DBUS policy checking [CVE-2026-4948] in 12.15
security giflib: Fix memory corruption issues [CVE-2026-23868 CVE-2026-26740] in 12.15
security graphite2: Fix out-of-bounds write [CVE-2026-50593] in 12.15
security ironic: Fix file disclosure via image sources [CVE-2025-44021]; fix console command injection [CVE-2026-42510]; fix Swift token disclosure [CVE-2026-42997]; fix unsafe template execution [CVE-2026-44916] in 12.15
security keystone: Fix behaviour of user_enabled_invert [CVE-2026-40683]; prevent unauthorized EC2 credential creation and deletion [CVE-2026-33551] in 12.15
security libbytes-random-secure-perl: Fix incorrect usage of seed in PRNG [CVE-2026-11625] in 12.15
security libcaca: Prevent undefined behaviour in overflow check [CVE-2026-42046] in 12.15
security libcrypt-pbkdf2-perl: Change default hash algorithm to HMAC-SHA256 and default iterations to 600,000 [CVE-2026-9641]; generate salts using Crypt::URandom [CVE-2026-9638]; use a constant-time comparison in validate to avoid timing attacks [CVE-2017-20240] in 12.15
security libhtml-gumbo-perl: Fix uninitialized memory access [CVE-2025-15646] in 12.15
security libhtml-parser-perl: Fix heap-use-after-free in _decode_entities [CVE-2026-8829] in 12.15
security libnet-cidr-lite-perl: Fix IP/CIDR parser validation: reject non-ASCII digits and trailing newlines [CVE-2026-55190]; reject zero-padded CIDR masks [CVE-2026-45191] in 12.15
security libvncserver: Fix buffer overflow and out-of-bounds write [CVE-2026-44988 CVE-2026-50538] in 12.15
security libxml-libxml-perl: Fix out-of-bounds read [CVE-2026-8177] in 12.15
security libxml2: Fix catalogue recursion and duplicate-catalog handling [CVE-2025-8732 CVE-2026-0990 CVE-2026-0992]; limit RelaxNG include recursion [CVE-2026-0989]; fix xmllint shell memory leak [CVE-2026-1757]; correct schematron regression-test outputs [CVE-2025-49794 CVE-2025-49796]; fix XML writer… in 12.15
security mariadb: New upstream stable release; fix code execution issues [CVE-2025-13699 CVE-2026-44168 CVE-2026-48163 CVE-2026-48165 CVE-2026-49261]; fix denial of service issues [CVE-2026-21968 CVE-2026-34303]; fix logging bypass issue [CVE-2026-3494]; fix path traversal issue [CVE-2026-44171]; fix SQL… in 12.15
security mesa: Fix WebGPU/SPIR-V allocation handling [CVE-2026-40393] in 12.15
security modsecurity: Prevent denial of service in hexDecode handling [CVE-2026-30923]; prevent denial of service in SSN/CPF/SVNR verification [CVE-2026-42268] in 12.15
security mxml: Fix out-of-bounds read [CVE-2026-5037] in 12.15
security node-flatted: Fix prototype pollution issue [CVE-2026-33228] in 12.15
security openslide: Fix possible code execution issue [CVE-2026-48977] in 12.15
security p7zip: New upstream stable release; fix buffer overflow issues [CVE-2026-48092 CVE-2026-48095]; fix memory disclosure issue [CVE-2026-48101]; fix out-of-bounds read issues [CVE-2026-48102 CVE-2026-48103 CVE-2026-48111 CVE-2026-48112]; fix uninitialised memory read issue [CVE-2026-48104] in 12.15
security php-guzzlehttp-psr7: Fix Host authority validation [CVE-2026-48998]; reject control characters in URI hosts [CVE-2026-49214]; harden ServerRequest globals handling; normalise global header values; encode literal plus signs in query helpers in 12.15
security phpunit: Fix unsafe deserialization in PHPT code coverage handling [CVE-2026-24765] in 12.15
security protobuf: Fix parser recursion limits [CVE-2024-7254 CVE-2025-4565 CVE-2026-0994 CVE-2026-6409] in 12.15
security pydantic: Fix denial of service in email verification [CVE-2024-3772] in 12.15
security pymatgen: Fix denial of service in GaussianInput.from_string [CVE-2022-42964] in 12.15
security python-filelock: Fix symlink vulnerabilies [CVE-2025-68146 CVE-2026-22701] in 12.15
security python-markdown: Fix parsing of bogus HTML markup [CVE-2025-69534] in 12.15
security python-pyramid: Fix information disclosure issue [CVE-2023-40587] in 12.15
security python-xmltodict: Fix XML injection issue [CVE-2025-9375] in 12.15
security python3.11: Prevent incorrect tar archive handling [CVE-2025-13462]; ensure bytecode-only imports use normal security checks [CVE-2026-2297]; reject unsafe cookie values [CVE-2026-3644]; prevent XML parser crashes [CVE-2026-4224]; prevent browser command injection [CVE-2026-4519]; prevent bz2/lzma… in 12.15
security 131 security advisories included: DSA-6003 firefox-esr, DSA-6025 firefox-esr, DSA-6054 firefox-esr, DSA-6078 firefox-esr, DSA-6093 gimp, DSA-6094 libsodium, DSA-6096 vlc, DSA-6097 chromium, DSA-6098 net-snmp, DSA-6100 chromium, DSA-6101 firefox-esr, DSA-6102 python-urllib3, … in 12.14
security 7zip: New upstream stable release; fix integer underflow issue [CVE-2023-31102]; fix code execution issues [CVE-2023-40481 CVE-2025-11001 CVE-2025-11002]; fix denial of service issue [CVE-2024-11612]; fix null pointer dereference issue [CVE-2025-53817]; fix handling of symbolic links… in 12.14
security apache2: New upstream release: fix http2 regression; fix use-after-free issue [CVE-2026-23918]; fix privilege escalation issue [CVE-2026-24072]; fix NULL pointer dereference issues [CVE-2026-29169 CVE-2026-33007]; fix authentication bypass issue [CVE-2026-33006]; fix HTTP response splitting issue… in 12.14
security arduino-core-avr: New upstream stable release; fix buffer overflow issue [CVE-2025-69209] in 12.14
security augeas: Fix NULL pointer dereference issue [CVE-2025-2588] in 12.14
security awstats: Prevent command injection [CVE-2025-63261] in 12.14
security busybox: Fix stack overflow [CVE-2022-48174] and use-after-free [CVE-2023-42363 CVE-2023-42364 CVE-2023-42365] errors in 12.14
security c3p0: Fix recursive entity expansion issue [CVE-2019-5427] in 12.14
security calibre: Fix path traversal issues [CVE-2026-25635 CVE-2026-25636 CVE-2026-26064 CVE-2026-26065]; fix code execution issue [CVE-2026-25731]; fix HTTP response header injection issue [CVE-2026-27810]; fix IP ban bypass issue [CVE-2026-27824] in 12.14
security composer: Fix code execution issue [CVE-2023-43655]; fix command injection issues [CVE-2026-40261 CVE-2026-40176] in 12.14
security containerd: Fix CRI Attach implementation [CVE-2025-64329]; fix overly broad directory permissions [CVE-2024-25621]; fix large UID:GID (> 32bit) overflow [CVE-2024-40635] in 12.14
security dovecot: Correct incomplete backport of CVE-2026-27855 fix; fix memory leak in CVE-2026-27857 fix in 12.14
security dpkg: New upstream stable release; fix insufficient permissions check leading to possible denial of service issue [CVE-2025-6297]; fix denial of service issue [CVE-2026-2219]; fix buffer over-read issue; fix uninitialized variable warning with Rules-Requires-Root; fix segmentation fault in… in 12.14
security erlang: Fix denial of service issues [CVE-2025-48038 CVE-2025-48039 CVE-2025-48040 CVE-2025-48041]; fix HTTP request smuggling issue [CVE-2026-23941]; fix path traversal issues [CVE-2026-23942 CVE-2026-21620]; fix compression bomb issue [CVE-2026-23943] in 12.14
security exim4: Fix GnuTLS hostname verify of a server certificate with a zero-length Subject; fix denial of service issue [CVE-2026-40684]; fix out-of-bounds read/write issues [CVE-2026-40685 CVE-2026-40686 CVE-2026-40687] in 12.14
security fonttools: Fix XML External Entity injection issue [CVE-2023-45139]; fix code execution issue [CVE-2025-66034] in 12.14
security glance: Fix server-side request forgery issue [CVE-2026-34881]; fix build failure in 12.14
security glib2.0: Fix timezone handling with Debian & Ubuntu's symlinks; fix missing input validation in g_buffered_input_stream_peek [CVE-2026-0988]; fix integer overflow in base64 encoding [CVE-2026-1484]; fix buffer underflow issue in content type parsing [CVE-2026-1485]; fix integer overflow in unicode… in 12.14
security glibc: Fix integer overflow issue [CVE-2026-0861]; fix uninitialised memory use issue [CVE-2025-15281]; fix incorrect handling of DNS responses [CVE-2026-4437]; fix return of invalid DNS hostnames [CVE-2026-4438]; fix assertion failure [CVE-2026-4046]; fix performance bottleneck with ASAN on… in 12.14
security gpsd: Fix out-of-bounds write issue [CVE-2025-67268]; fix integer underflow issue [CVE-2025-67269] in 12.14
security grub-efi-amd64-signed: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix… in 12.14
security grub-efi-arm64-signed: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix… in 12.14
security grub-efi-ia32-signed: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix… in 12.14
security grub2: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix commands/extcmd:… in 12.14
security gvfs: Use control connection address for PASV data [CVE-2026-28295]; reject paths containing CR/LF characters [CVE-2026-28296] in 12.14
security kissfft: Fix integer overflow issues [CVE-2025-34297 CVE-2026-41445] in 12.14
security libarchive: Fix out-of-bounds read issues [CVE-2025-5918 CVE-2026-4424]; fix denial of service issues [CVE-2026-4111 CVE-2026-4426]; fix possible code execution issue [CVE-2026-5121] in 12.14
security libcap2: Fix time of check / time of use issue [CVE-2026-4878]; rebuild with updated glibc in 12.14
security libexif: Fix integer underflow issues [CVE-2026-40386 CVE-2026-32775]; fix integer overflow issue [CVE-2026-40385] in 12.14
security libnet-cidr-lite-perl: Fix ACL bypass issues [CVE-2026-40198 CVE-2026-40199] in 12.14
security libpng1.6: Fix heap buffer overflow issues [CVE-2026-22801 CVE-2026-22695] in 12.14
security libreoffice: Fix incomplete fix for CVE-2024-12426 in 12.14
security libuev: Fix buffer overrun issue [CVE-2022-48620] in 12.14
security libvncserver: Fix out-of-bounds read issue [CVE-2026-32853]; fix null pointer dereference issue [CVE-2026-32854] in 12.14
security libxml-security-java: Fix private key disclosure issue [CVE-2023-44483] in 12.14
security lxc: Fix authorisation bypass issue [CVE-2026-39402] in 12.14
security mapserver: Fix SQL injection issue [CVE-2025-59431]; fix buffer overflow issue [CVE-2026-33721]; fix heap-buffer-overflow and double-free issues in maplexer in 12.14
security modsecurity-crs: Fix rule bypass issue [CVE-2023-38199]; fix file extension blocking bypass issue [CVE-2026-33691] in 12.14
security mongo-c-driver: Fix insufficient validation issues [CVE-2025-14911 CVE-2026-6231]; fix denial of service issue [CVE-2026-4359]; fix buffer overflow issue [CVE-2026-6691]; improve handling of corrupt GridFS files in 12.14
security nginx: Fix buffer overflow issues [CVE-2026-27654 CVE-2026-27784 CVE-2026-32647]; fix session authentication issues [CVE-2026-27651 CVE-2026-28753]; fix OCSP result bypass issue [CVE-2026-28755]; use $host instead of $http_host in 12.14
security 77 security advisories included: DSA-5979 libxslt, DSA-5993 chromium, DSA-5994 shibboleth-sp, DSA-5996 chromium, DSA-5997 imagemagick, DSA-5998 cups, DSA-5999 libjson-xs-perl, DSA-6000 libcpanel-json-xs-perl, DSA-6001 cjson, DSA-6002 node-sha.js, DSA-6003 firefox-esr, DSA-6004 chromium, … in 12.13
security angular.js: Fix regular expression-based denial of service issues [CVE-2022-25844 CVE-2023-26116 CVE-2023-26117 CVE-2023-26118]; fix restriction bypass issues [CVE-2024-8372 CVE-2024-8373]; fix denial of service issue [CVE-2024-21490]; fix improper sanitization issues [CVE-2025-0716 CVE-2025-2336] in 12.13
security apache2: New upstream stable release; fix integer overflow issue [CVE-2025-55753]; don't pass querystring to #exec directives [CVE-2025-58098]; fix improper parsing of environment variables [CVE-2025-65082]; fix mod_userdir+suexec bypass issue [CVE-2025-66200] in 12.13
security calibre: Fix code execution issue [CVE-2025-64486] in 12.13
security composer: Fix ANSI sequence injection [CVE-2025-67746] in 12.13
security cups-filters: Fix TIFF parser bounds/validation issues [CVE-2025-57812]; clamp oversized PDF MediaBox-derived page size in pdftoraster [CVE-2025-64503]; avoid rastertopclx infinite loop and heap overflow on crafted raster input [CVE-2025-64524] in 12.13
security freerdp2: New upstream release; fix multiple memory-safety vulnerabilities: integer overflow/underflow and out-of-bounds write in NSC, Clear, and GDI bitmap codecs [CVE-2024-22211 CVE-2024-32037 CVE-2024-32038 CVE-2024-32039 CVE-2024-32040]; out-of-bounds reads in ZGFX, Planar, NCRUSH,… in 12.13
security gdk-pixbuf: Fix buffer overflow issue [CVE-2025-7345] in 12.13
security git: Fix arbitrary file creation/truncation in gitk [CVE-2025-27613]; prevent arbitrary file overwrite in git-gui with crafted directory names [CVE-2025-46835]; correct submodule path parsing with trailing CR [CVE-2025-48384]; validate bundle-uri to prevent protocol injection during clone… in 12.13
security glib2.0: Fix various integer overflow issues [CVE-2025-13601 CVE-2025-14087 CVE-2025-14512] in 12.13
security gnupg2: Avoid potential downgrade to SHA1 in 3rd party key signatures; error out on unverified output for non-detached signatures; fix possible memory corruption in the armor parser [CVE-2025-68973]; do not use a default when asking for another output filename in 12.13
security imagemagick: Fix denial of service issues [CVE-2025-62594 CVE-2025-68618]; fix use-after-free issue [CVE-2025-65955]; fix integer overflow issues [CVE-2025-62171 CVE-2025-66628 CVE-2025-69204]; fix infinite loop issue [CVE-2025-68950] in 12.13
security lemonldap-ng: Fix sessions tablename when not default; fix oidc flow when user encountered an error on server side; fix Kerberos JavaScript when used with Choice; improve CORS checking; fix path_info handling; fix shell injection issue [CVE-2025-59518]; hide session id from Ajax responses in 12.13
security libcommons-lang-java: Fix uncontrolled recursion issue [CVE-2025-48924] in 12.13
security libcommons-lang3-java: Fix uncontrolled recursion issue [CVE-2025-48924] in 12.13
security libhtp: Fix denial of service issue via unbounded HTTP header processing [CVE-2024-23837 CVE-2024-45797] in 12.13
security libnginx-mod-http-lua: Fix HTTP HEAD request smuggling [CVE-2024-33452] in 12.13
security libphp-adodb: Fix SQL injection in sqlite and sqlite3 metadata lookups [CVE-2025-54119] in 12.13
security libssh: Fix integer overflow issue [CVE-2025-4877]; fix use of uninitialized variable [CVE-2025-4878]; fix out of bounds memory access issue [CVE-2025-5318]; fix double free issue [CVE-2025-5351]; fix use of uninitialized memory [CVE-2025-5372 CVE-2025-5987]; fix null pointer dereference issue… in 12.13
security libxml2: Fix denial of service issue [CVE-2025-9714] in 12.13
security log4cxx: Fix improper escaping issues [CVE-2025-54812 CVE-2025-54813] in 12.13
security luksmeta: Fix data corruption issue with LUKS1 [CVE-2025-11568] in 12.13
security modsecurity-apache: Fix request body error handling to propagate Apache filter/read failures correctly [CVE-2025-54571]; map request body read failures to appropriate HTTP status codes; simplify request body error propagation in mod_security2 in 12.13
security mongo-c-driver: Avoid invalid memory reads [CVE-2025-12119] in 12.13
security mydumper: Fix arbitrary file read issue [CVE-2025-30224] in 12.13
security nvidia-graphics-drivers: New upstream bugfix release [CVE-2025-23279 CVE-2025-23286] in 12.13
security nvidia-open-gpu-kernel-modules: New upstream bugfix release [CVE-2025-23279 CVE-2025-23286] in 12.13
security open-vm-tools: Disable SDMP service version collection by default to mitigate local privilege escalation [CVE-2025-41244] in 12.13
security openrefine: Fix MySQL host parameter injection in JDBC URL parsing [CVE-2024-23833]; fix reflected XSS in gdata OAuth callback handler [CVE-2024-47878]; fix content-type confusion XSS in ExportRows endpoint [CVE-2024-47880]; prevent remote or extension loading via SQLite connection URL… in 12.13
security pam: Fix local privilege escalation in pam_namespace [CVE-2025-6020] in 12.13
security pgbouncer: Fix arbitary SQL execution issue [CVE-2025-12819]; fix expired password use issue [CVE-2025-2291] in 12.13
security postgresql-15: New upstream stable release; check for CREATE privileges on the schema in CREATE STATISTICS [CVE-2025-12817]; avoid integer overflow in allocation-size calculations within libpq [CVE-2025-12818] in 12.13
security qemu: New upstream stable release; fix qemu-img info https://example.com; fix migration of guests using virtio-net; fix use after free issue [CVE-2025-11234] in 12.13
security r-cran-gh: Fix sensitive data leak issue [CVE-2025-54956] in 12.13
security rear: Prevent created initrd from being world-readable when GRUB_RESCUE=y [CVE-2024-23301] in 12.13
security rlottie: Fix outlying coordinate rejection in FreeType rasteriser [CVE-2025-0634 CVE-2025-53074 CVE-2025-53075] in 12.13
security rsync: Improve test coverage for future updates; fix out-of-bounds read via negative array index in sender file list handling [CVE-2025-10158] in 12.13
security ruby-sinatra: Fix regular expression-based denial of service issue [CVE-2025-61921] in 12.13
security samba: Fix information leak issue [CVE-2018-14628]; fix command injection issue [CVE-2025-10230]; fix uninitialized memory disclosure issue [CVE-2025-9640] in 12.13
security sogo: Fix HTML injection issue [CVE-2023-48104]; fix CSS injection issue [CVE-2024-24510]; fix cross-site scripting issues [CVE-2025-63498 CVE-2025-63499]; fix crash on invalid mailIdentities in 12.13

Every release in between

13.7 Sep 12, 2026 Release notes ↗

security92 security advisories included: DSA-6381 linux-signed-amd64 +2, DSA-6382 postfix, DSA-6383 imagemagick, DSA-6385 pgextwlist, DSA-6386 opam, DSA-6387 chromium, DSA-6388 libxfont, DSA-6389 ntfs-3g, DSA-6390 chromium, DSA-6391 roundcube, DSA-6392 tiff, DSA-6393 linux-signed-amd64 +2, …

securityalsa-lib: Fix heap overflow issue [CVE-2026-25068]

securityansible-core: New upstream stable release; fix arbitrary code injection issue [CVE-2026-11332]

securitybettercap: Fix mysql.server module remote DoS via crafted client handshake [CVE-2026-8276]; stop installing systemd service by default

securitybinwalk: Fix path traversal issue [CVE-2026-7179]

securitycyrus-imapd: Allow JMAP EventSource without WebSocket/wslay; fix insufficient access check issues [CVE-2026-47084 CVE-2026-47086 CVE-2026-47087 CVE-2026-47081 CVE-2026-47089 CVE-2026-47085 CVE-2026-47083 CVE-2026-47082]; fix out of bounds read issue [CVE-2026-47088]

securitydcmtk: Fix denial of service issues [CVE-2026-35505 CVE-2026-44628 CVE-2026-50254]; fix path traversal issues [CVE-2026-50003 CVE-2026-52868]

securitydhcpcd: Fix IPv6 Neighbor Discovery option parsing to discard advertisements with zero-length options [CVE-2026-14258]

securitydnsmasq: Fix buffer overflow issue [CVE-2026-12725]; fix out of bounds read issue [CVE-2026-12969]

securityflask: Ensure Vary: Cookie is set on session access [CVE-2026-27205]

securityfluidsynth: Fix buffer overflow issues [CVE-2026-58264 CVE-2026-61714]

securityglib2.0: Fix out of bounds access issues [CVE-2026-58010 CVE-2026-58011 CVE-2026-58012 CVE-2026-58013 CVE-2026-58014]; fix file content disclosure issue [CVE-2026-58015]; fix denial of service issue [CVE-2026-15588]; fix integer underflow issue [CVE-2026-58016]; fix out of bounds write issue…

securityglibc: Fix buffer overflow/underflow issues [CVE-2026-5928 CVE-2026-5450]; ensure compatibility with linux 7.0 headers

securitygoaccess: Fix out of bounds write issue [CVE-2026-54715]; fix denial of service issue [CVE-2026-55768 CVE-2026-55777]

securitygpsd: Fix gpsprof command and code injection in gnuplot script generation [CVE-2026-58459 CVE-2026-60122]

securitygzip: Fix insecure temporary file handling issue [CVE-2026-41991]; fix buffer overflow issue [CVE-2026-41992]

securityimagemagick: Fix buffer overflow issues [CVE-2026-56362 CVE-2026-56372 CVE-2026-56374 CVE-2026-61464]; fix memory leak issues [CVE-2026-56366 CVE-2026-56375 CVE-2026-61863 CVE-2026-61864 CVE-2026-61865 CVE-2026-61866 CVE-2026-61867 CVE-2026-61868 CVE-2026-61869 CVE-2026-61870 CVE-2026-61871…

securityincus: Fix path traversal issue [CVE-2026-81500]; fix insufficent access check issue [CVE-2026-81501]

securitylibhttp-tiny-perl: Fix CRLF validation issue [CVE-2026-7010]; fix credential forwarding on redirects issue [CVE-2026-7017]

securitylibio-compress-perl: Fix header parsing issue [CVE-2025-15649]; fix denial of service issue [CVE-2026-48959]; fix crash in zipdetails [CVE-2026-48961]; fix code execution issue [CVE-2026-48962]

securitylibmongocrypt: Fix missing input validation issue [CVE-2026-81523]

securitylibnet-cidr-set-perl: Fix IPv4/IPv6 CIDR parsing validation [CVE-2026-49940 CVE-2026-49941 CVE-2026-49942]

securitylibnfs: Fix integer overflow [CVE-2026-53689]

securitylibraw: Fix out of bounds read issue [CVE-2026-5342]; fix integer overflow issues [CVE-2026-20884 CVE-2026-24450]; fix buffer overflow issues [CVE-2026-20889 CVE-2026-21413 CVE-2026-24660]

securitylibsdl2-image: Fix out of bounds read issue [CVE-2026-35444]; improve parser robustness

securitylibsdl3-image: Fix out of bounds read issue [CVE-2026-35444]; improve parser robustness

securitylibsocket-perl: Fix out of bounds read issue [CVE-2026-12087]

securitylibssh2: Fix buffer overflow issues [CVE-2026-58050 CVE-2026-66035 CVE-2026-58051]; fix double free issue [CVE-2026-66032]; fix integer underflow issue [CVE-2026-66033]; fix data leak issue [CVE-2026-66034]

securitylibvirt: Fix buffer overflow issue [CVE-2026-18917]; fix record injection issue [CVE-2026-61477]; fix denial of service issue [CVE-2026-61478]; fix privilege escalation issue [CVE-2026-63622]; fix information disclosure issue [CVE-2026-63623]

securitylibwebsockets: Fix denial of service issue [CVE-2026-10650]; fix out of bounds write issue [CVE-2026-78161]

securitylwip: Fix SNMPv3 authentication buffer overflow [CVE-2026-8836]

securitymbedtls: Fix signature algorithm injection issue [CVE-2026-25834]; fix PSA random generator cloning issue [CVE-2026-25835]; fix improper validation issue [CVE-2026-34872]; fix client impersonation issue [CVE-2026-34873]; fix NULL pointer dereference issue [CVE-2026-34874]; fix buffer overflow…

securitymongo-c-driver: Fix missing input validation issue [CVE-2026-81524]

securitymrtg: Fix privilege escalation issue [CVE-2026-72694]

securitynode-lodash: Fix prototype pollution issues [CVE-2025-13465 CVE-2025-13465]; validate imports keys in _.template [CVE-2026-4800]

securityonionshare: Prevent writing files in Receive mode when file uploads are disabled [CVE-2026-54707]; Prevent empty folder from being created when no file is uploaded [CVE-2026-54706]

securityopencryptoki: Fix privilege escalation issue [CVE-2026-23893]; fix out of bounds read issue [CVE-2026-40253]

securitypatool: Fix path traversal vulnerability [CVE-2026-29509]

securityperl: Fix credential forwarding on redirects issue [CVE-2026-7017]; fix symlink extraction issue [CVE-2026-42496]; fix hardlink extraction issue [CVE-2026-42497]; fix out of bounds read issues [CVE-2026-12087 CVE-2026-57432]; fix incorrect regular expression match issue [CVE-2026-13221]; fix…

securityphp-guzzlehttp-psr7: Fix CRLF injection in HTTP start-line parsing [CVE-2026-55766]

+67 more items in the release notes

13.6 Jul 11, 2026 Release notes ↗

security109 security advisories included: DSA-6250 chromium, DSA-6256 php8.4, DSA-6266 nghttp2, DSA-6267 thunderbird, DSA-6268 ffmpeg, DSA-6270 postgresql-17, DSA-6271 gsasl, DSA-6273 chromium, DSA-6274 linux-signed-amd64 +2, DSA-6277 openjpeg2, DSA-6278 nginx, DSA-6279 redis, DSA-6280 netatalk, …

securityapache2: Fix use-after-free issues [CVE-2026-29167 CVE-2026-48913]; fix cross-site scripting issue [CVE-2026-29170]; fix buffer overflow issues [CVE-2026-34355 CVE-2026-34356 CVE-2026-42536]; fix denial of service issues [CVE-2026-42535 CVE-2026-44186 CVE-2026-49975]; fix out of bounds read issues…

securitybeets: Fix XSS vulnerability [CVE-2026-42052]

securitycalibre: Fix unsafe e-book extraction and resource path handling [CVE-2026-30853 CVE-2026-33206]; prevent e-book viewer local file reads and SSRF/exfiltration [CVE-2026-33205]; avoid unsafe catalog rule evaluation; correct XPath and SQL query handling; fix reader-background endpoint path…

securityckermit: Block remote control of the local kermit by default [CVE-2025-68920]; disable unnecessary OpenSSL version check

securitycomposer: Fix support for new GitHub token format [CVE-2026-45793]

securitycurl: Fix bearer token redirect leaks [CVE-2025-14524 CVE-2026-3783]; correct OpenSSL CA cache reuse [CVE-2025-14819]; fix HTTP Negotiate and proxy connection reuse [CVE-2026-1965 CVE-2026-3784 CVE-2026-5545]; prevent clear-text STARTTLS connection reuse [CVE-2026-4873]; fix SMB use-after-free and…

securitydcmtk: Fix NULL pointer dereference issues [CVE-2022-4981 CVE-2025-14841]; fix memory corruption issues [CVE-2025-2357 CVE-2025-9732 CVE-2025-14607]; fix command injection issue [CVE-2026-5663]; fix buffer overflow issues [CVE-2026-10194 CVE-2026-12805]

securitydebusine: Enforce file upload permissions; restrict artifact relation creation/deletion [CVE-2026-11852]; harden sbuild repository command quoting; reject unsafe .dsc/.changes checksum paths [CVE-2026-11853]

securitydeepdiff: Fix class pollution issue [CVE-2025-58367]; fix denial of service issue [CVE-2026-33155]

securitydhcpcd: Fix memory safety issues [CVE-2025-70102 CVE-2026-56113 CVE-2026-56114]; fix IPv6 Router Advertisement information leakage [CVE-2026-56116]; correct control socket lifetime handling [CVE-2026-56117]

securitydolphin: Fix sandbox escape issue [CVE-2026-41525]

securityerrands: Fix verification of TLS certificates for CalDAV servers [CVE-2025-71063]

securitygdown: Fix arbitray file write issue [CVE-2026-40491]

securitygiflib: Fix memory corruption issues [CVE-2026-23868 CVE-2026-26740]

securitygimp: Fix integer overflow issues [CVE-2026-4154 CVE-2026-40915]

securitygraphite2: Fix out-of-bounds write [CVE-2026-50593]

securityironic: Fix credential forwarding from configuration molds [CVE-2026-42997]; fix IPMI console command injection [CVE-2026-42510]; sandbox kickstart template rendering [CVE-2026-44916]; prevent conductor thread exhaustion from file special devices [CVE-2026-44919]; restrict unsafe file image paths;…

securityisc-kea: Fix denial of service issue [CVE-2026-3608]

securitykeystone: Fix behaviour of user_enabled_invert [CVE-2026-40683]; prevent unauthorized EC2 credential creation and deletion [CVE-2026-33551]

securitylibapache-session-browseable-perl: Improve entropy source [CVE-2026-8503]

securitylibbytes-random-secure-perl: Fix incorrect usage of seed in PRNG [CVE-2026-11625]

securitylibcaca: Prevent undefined behaviour in overflow check [CVE-2026-42046]

securitylibcrypt-pbkdf2-perl: Change default hash algorithm to HMAC-SHA256 and default iterations to 600,000 [CVE-2026-9641]; generate salts using Crypt::URandom [CVE-2026-9638]; use a constant-time comparison in validate to avoid timing attacks [CVE-2017-20240]

securitylibcrypt-urandom-perl: Fix buffer overflow issue [CVE-2026-2474]

securitylibhtml-parser-perl: Fix heap-use-after-free in _decode_entities [CVE-2026-8829]

securitylibnet-cidr-lite-perl: Fix IP/CIDR parser validation: reject non-ASCII digits and trailing newlines [CVE-2026-55190]; reject zero-padded CIDR masks [CVE-2026-45191]

securitylibslirp: Fix memory disclosure issue [CVE-2026-9539]

securitylibtasn1-6: Fix buffer overflow issue [CVE-2025-13151]

securitylibvncserver: Fix buffer overflow and out-of-bounds write [CVE-2026-44988 CVE-2026-50538]

securitylibxml-libxml-perl: Fix out-of-bounds read [CVE-2026-8177]

securitylibxml2: Fix RelaxNG include recursion limits [CVE-2026-0989]; prevent XML and SGML catalog recursion/resource exhaustion [CVE-2025-8732 CVE-2026-0990 CVE-2026-0992]; fix xmllint shell memory leak [CVE-2026-1757]; correct XML writer and Schematron error-path leaks; avoid RelaxNG validation…

securitylibxpm: Fix out of bounds read issue [CVE-2026-4367]

securitylxml-html-clean: Fix filter bypass issue [CVE-2026-28348]; fix tag injection issue [CVE-2026-28350]

securitymesa: Fix WebGPU/SPIR-V allocation handling [CVE-2026-40393]

securityminiupnpd: Fix integer underflow issue [CVE-2026-5720]

securitymodsecurity: Prevent denial of service in hexDecode handling [CVE-2026-30923]; prevent denial of service in SSN/CPF/SVNR verification [CVE-2026-42268]

securitymutt: Fix buffer truncation issues [CVE-2026-43859 CVE-2026-43860 CVE-2026-43861]; fix mishandling of imap_auth_gss security level [CVE-2026-43862]; fix denial of service issue [CVE-2026-43863]; fix NULL pointer dereference issue [CVE-2026-43864]

securitymxml: Fix out-of-bounds read [CVE-2026-5037]

securitynbconvert: Fix arbitrary file read/write issues [CVE-2026-39377 CVE-2026-39378]

+85 more items in the release notes

13.5 May 16, 2026 Release notes ↗

security96 security advisories included: DSA-6088 php8.4, DSA-6158 imagemagick, DSA-6160 netty, DSA-6161 multipart, DSA-6162 linux-signed-amd64 +2, DSA-6164 chromium, DSA-6165 chromium, DSA-6166 nodejs, DSA-6167 gst-plugins-base1.0, DSA-6168 freetype, DSA-6169 imagemagick, DSA-6170 snapd, …

security389-ds-base: Fix heap overflow issue [CVE-2025-14905]

securityapache2: New upstream stable release; fix use-after-free issue [CVE-2026-23918]; fix privilege escalation issue [CVE-2026-24072]; fix NULL pointer dereference issues [CVE-2026-29169 CVE-2026-33007]; fix authentication bypass issue [CVE-2026-33006]; fix HTTP response splitting issue…

securityawstats: Prevent command injection [CVE-2025-63261]

securityblack: Fix arbitrary file write issue [CVE-2026-32274]

securitybubblewrap: Fix privilege escalation issue [CVE-2026-41163]

securitycalibre: Fix path traversal issues [CVE-2026-25635 CVE-2026-25636 CVE-2026-26064 CVE-2026-26065]; fix code execution issue [CVE-2026-25731]; fix HTTP response header injection issue [CVE-2026-27810]; fix IP ban bypass issue [CVE-2026-27824]

securitycimg: Fix overflow issue [CVE-2026-42144]; fix out of memory issue with crafted files [CVE-2026-42146]

securitycockpit: Fix code execution issue [CVE-2026-4631]

securitycomposer: Fix command injection issues [CVE-2026-40261 CVE-2026-40176]

securitycurl: Fix server certificate verification issue [CVE-2025-13034]

securitydovecot: Fix memory leak in CVE-2026-27857 fix

securityerlang: Fix path traversal issues [CVE-2026-21620 CVE-2026-23942[; fix HTTP request smuggling issue [CVE-2026-23941]; fix denial of service issue [CVE-2026-23943]

securityexim4: Fix GnuTLS hostname verify of a server certificate with a zero-length Subject; fix denial of service issue [CVE-2026-40684]; fix out-of-bounds read/write issues [CVE-2026-40685 CVE-2026-40686 CVE-2026-40687]

securityfirewalld: Prevent local users from being able to modify runtime firewall state without prior authentication if the desktop policy is active [CVE-2026-4948]

securityfreerdp3: Fix issues with large certificates; fix clipboard paste issue; fix segmentation fault issue [CVE-2025-4478]; fix use-after-free issues [CVE-2026-22851 CVE-2026-22856 CVE-2026-22857 CVE-2026-23883 CVE-2026-23884 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24678 CVE-2026-24680…

securitygit-lfs: Fix arbitrary file write issue [CVE-2025-26625]

securityglance: Fix server-side request forgery issue [CVE-2026-34881]; fix build failure

securityglib2.0: Fix timezone handling with Debian & Ubuntu's symlinks; fix missing input validation in g_buffered_input_stream_peek [CVE-2026-0988]; fix integer overflow in base64 encoding [CVE-2026-1484]; fix buffer underflow issue in content type parsing [CVE-2026-1485]; fix integer overflow in unicode…

securityglibc: Fix incorrect handling of DNS responses [CVE-2026-4437]; fix return of invalid DNS hostnames [CVE-2026-4438]; fix assertion failure [CVE-2026-4046]; fix a null pointer dereference in the nss_database_check_reload_and_get function; fix invalid pointer arithmetic in ANSI_X3.110 iconv module;…

securitygvfs: Use control connection address for PASV data [CVE-2026-28295]; reject paths containing CR/LF characters [CVE-2026-28296]

securityharfbuzz: Fix NULL pointer dereference issue [CVE-2026-22693]

securityjpeg-xl: Fix uninitialised memory read issues [CVE-2025-12474 CVE-2026-1837]; fix cross build failure; fix nojava build profile; fix build on big-endian architectures

securityjq: Fix buffer overflow issue [CVE-2026-32316]; fix denial of service issues [CVE-2026-33947 CVE-2026-39956]; fix validation bypass issue [CVE-2026-33948]; fix out-of-bounds read issue [CVE-2026-39979]; fix use of hardcoded seed [CVE-2026-40164]

securitykissfft: Fix integer overflow issues [CVE-2025-34297 CVE-2026-41445]

securitylibarchive: Fix out-of-bounds read issues [CVE-2025-5918 CVE-2026-4424]; fix denial of service issues [CVE-2026-4111 CVE-2026-4426]; fix possible code execution issue [CVE-2026-5121]

securitylibcap2: Fix time of check / time of use issue [CVE-2026-4878]

securitylibcdio: Fix buffer overflow issue [CVE-2024-36600]

securitylibcoap3: Fix out-of-bounds read issue [CVE-2026-29013]; fix buffer overflow issue [CVE-2025-34468]

securitylibcryptx-perl: Fix Crypt::PK key generation is not fork safe and will generate identical keys [CVE-2026-41564]

securitylibexif: Fix integer underflow issues [CVE-2026-40386 CVE-2026-32775]; fix integer overflow issue [CVE-2026-40385]

securitylibnet-cidr-lite-perl: Fix ACL bypass issues [CVE-2026-40198 CVE-2026-40199]

securitylibtext-csv-xs-perl: Fix stack corruption issue [CVE-2026-7111]

securitylibvncserver: Fix out of bounds read issue [CVE-2026-32853]; fix NULL pointer dereference issue [CVE-2026-32854]

securitylibxml-security-java: Fix private key disclosure issue [CVE-2023-44483]

securitylxc: Fix authorisation bypass issue [CVE-2026-39402]

securitymapserver: Fix buffer overflow issue [CVE-2026-33721]

securitymodsecurity-crs: Fix file extension blocking bypass issue [CVE-2026-33691]

securitymongo-c-driver: Fix insufficient validation issues [CVE-2025-14911 CVE-2026-6231]; fix denial of service issue [CVE-2026-4359]; fix buffer overflow issue [CVE-2026-6691]; improve handling of corrupt GridFS files

securitymusl: Fix denial of service issue [CVE-2026-6042]; fix stack corruption issue [CVE-2026-40200]

+105 more items in the release notes

13.4 Mar 14, 2026 Release notes ↗

security62 security advisories included: DSA-6054 firefox-esr, DSA-6078 firefox-esr, DSA-6093 gimp, DSA-6094 libsodium, DSA-6095 foomuuri, DSA-6096 vlc, DSA-6097 chromium, DSA-6098 net-snmp, DSA-6099 python-parsl, DSA-6100 chromium, DSA-6101 firefox-esr, DSA-6102 python-urllib3, …

fixakonadi: Show all folders in kmail

fixapache2: Fix HTTP/2 regression

securityarduino-core-avr: New upstream stable release; fix buffer overflow issue [CVE-2025-69209]

fixasahi-scripts: Fix SD card reader autosuspend

securityaugeas: Fix null pointer dereference issue [CVE-2025-2588]

fixbase-files: Update for the point release

fixbash: Rebuild with updated glibc

securitycapstone: New upstream stable release; fix buffer overflow issue [CVE-2025-67873]; fix buffer underflow and overflow issue [CVE-2025-68114]

securitycivetweb: Fix denial of service issue [CVE-2025-9648]; fix buffer overflow issue [CVE-2025-55763]

securitydirewolf: Fix stack buffer overflow [CVE-2025-34457]

securitydpkg: dpkg-query: Fix segfault with empty -S argument; Dpkg::OpenPGP: Do not run verify with no keyrings; Dpkg::Shlibs::Objdump::Object: Add support for Version References symbols; Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import; fix denial of service issue [CVE-2026-2219]

securityerlang: Fix excessive resource use issues [CVE-2025-48038 CVE-2025-48039 CVE-2025-48040 CVE-2025-48041]; fix traffic redirection issue [CVE-2016-1000107]

securityfluidsynth: Fix null pointer dereference issue [CVE-2025-56225]

securityfonttools: Fix arbitrary file write issue [CVE-2025-66034]

securityglibc: Update from upstream stable branch; fix heap corruption issue [CVE-2026-0861]; fix stack contents leak issue [CVE-2026-0915]; fix uninitialized memory use issue [CVE-2025-15281]; switch currency symbol for the bg_BG locale to euro; fix a null pointer dereference in symbol lookup when the…

securitygpsd: Fix out-of-bounds write issue [CVE-2025-67268]; fix denial of service issue [CVE-2025-67269]

securityjaraco.context: Prevent path traversal [CVE-2026-23949]

securitylibpng1.6: Fix heap buffer overflow issues [CVE-2026-22801 CVE-2026-22695]

securitylibsndfile: Fix memory leak issue [CVE-2025-56226]

securitymariadb: New upstream stable release; fix arbitrary code execution issue [CVE-2025-13699]; fix denial of service issue [CVE-CVE-2026-21968]; use tmpfiles.d to generate runtime directory; fix upgrades from version 10.4 when encryption is enabled; fix innodb_linux_aio support

securitynode-proxy-agents: Fix path traversal issue [CVE-2026-27699]

securityopenssh: Fix mistracking of MaxStartups process exits in some situations; fix possible code execution issues [CVE-2025-61984 CVE-2025-61985]

securitypcsx2: Fix code execution issue [CVE-2025-49589]

securityphpunit: Fix unsafe deserialization issue [CVE-2026-24765]

securitypostgresql-17: New upstream stable release; fix buffer overrun issue [CVE-2026-2006]

securitypython-cryptography: Fix missing validation in EC public key creation [CVE-2026-26007]

securitypython-filelock: Fix TOCTOU symlink handling vulnerability in lock file creation [CVE-2025-68146]

securitypython-multipart: Fix arbitrary file write issue [CVE-2026-24486]

securityqemu: New upstream stable release; fix denial of service issues [CVE-2025-14876 CVE-2026-0665]

securityrequests: Fix credential leak issue [CVE-2024-47081]

securityrust-ntp-proto: Fix excessive load issue [CVE-2026-26076]

securityrust-ntpd: Rebuild with rust-ntp-proto 1.4.0-4+deb13u1 to fix CVE-2026-26076

securitysqlite3: Prevent integer overflow in FTSS extension [CVE-2025-7709]; add missing build dependency on pkgconf

securitystarlette: Fix denial of service issue [CVE-2025-62727]

securitysuricata: Fix denial of service issues [CVE-2026-22258 CVE-2026-22259 CVE-2026-22261]; fix stack overflow issue [CVE-2026-22262]; fix heap overflow issue [CVE-2026-22264]

securitywget2: Fix file overwrite issue with metalink [CVE-2025-69194]; fix remote buffer overflow [CVE-2025-69195]

securitywireshark: New upstream stable release; fix USB HID dissector memory exhaustion [CVE-2026-3201]; fix RF4CE Profile dissector crash [CVE-2026-3203]

securityxen: New upstream stable release; fix buffer overrun issue [CVE-2025-58150]; fix incomplete vCPU isolation issue [CVE-2026-23553]

securityzabbix: New upstream stable release; fix data leakage issues [CVE-2025-27231 CVE-2025-27233 CVE-2025-27236 CVE-2025-27238 CVE-2025-49641]; fix denial of service issue [CVE-2025-49643]

+72 more items in the release notes

13.3 Jan 10, 2026 Release notes ↗

security36 security advisories included: DSA-6041 strongswan, DSA-6051 incus, DSA-6052 rust-sudo-rs, DSA-6055 chromium, DSA-6056 keystone +1, DSA-6058 lasso, DSA-6059 thunderbird, DSA-6060 chromium, DSA-6061 tryton-sao, DSA-6062 pdfminer, DSA-6063 kdeconnect, DSA-6064 tryton-server, …

fixansible: New upstream stable release

securityapache2: New upstream stable release; fix integer overflow issue [CVE-2025-55753]; don't pass querystring to #exec directives [CVE-2025-58098]; fix improper parsing of environment variables [CVE-2025-65082]; fix mod_userdir+suexec bypass issue [CVE-2025-66200]

fixat-spi2-core: Ensure xkb group is taken into account for key events

fixawffull: Fix systemd timer invocation to avoid premature cron-script exit

fixbase-files: Update for the point release

fixbash: Rebuild with updated glibc

fixbglibs: Rebuild with updated glibc

fixbusybox: Rebuild with updated glibc

securitycalibre: Fix FB2 embedded binary handling in conversion plugin [CVE-2025-64486]

fixcatatonit: Rebuild with updated glibc

fixcdebootstrap: Rebuild with updated glibc

fixchkrootkit: Rebuild with updated glibc

fixcloud-init: Ensure deb822 sources.list template renders correctly

securitycomposer: Fix ANSI sequence injection [CVE-2025-67746]

securitycups-filters: Fix TIFF parser bounds/validation issues [CVE-2025-57812]; clamp oversized PDF MediaBox-derived page size in pdftoraster [CVE-2025-64503]; avoid rastertopclx infinite loop and heap overflow on crafted raster input [CVE-2025-64524]

securityedk2: Fix timing side-channel issue in ECDSA signature computation [CVE-2024-13176]; fix out-of-bounds memory access issue [CVE-2024-38805]; fix code execution issue [CVE-2025-3770]

securityfreedombox: distupgrade: Handle comments in sources.list file; update trixie's release date; backups: Set proper permissions for backups-data directory [CVE-2025-68462]

securityglib2.0: Fix various integer overflow issues [CVE-2025-13601 CVE-2025-14087 CVE-2025-14512]

securitygnupg2: Avoid potential downgrade to SHA1 in 3rd party key signatures; error out on unverified output for non-detached signatures; fix possible memory corruption in the armor parser [CVE-2025-68973]; do not use a default when asking for another output filename; rebuild with updated glibc

securitygnutls28: Fix PKCS#11 token label bounds in gnutls_pkcs11_token_init [CVE-2025-9820]; initialise PKCS#11 modules in thread-safe mode with fallback

securityimagemagick: Fix denial of service issues [CVE-2025-62594 CVE-2025-68618]; fix use-after-free issue [CVE-2025-65955]; fix integer overflow issues [CVE-2025-66628 CVE-2025-69204]; fix infinite loop issue [CVE-2025-68950]

securitylibcoap3: Fix configuration file parsing issue [CVE-2025-59391]; fix NULL pointer dereference issues [CVE-2025-65493 CVE-2025-65494 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65500 CVE-2025-65501]; fix integer signedness issue [CVE-2025-65495]; fix array index error issue [CVE-2025-65499]

securitylibcupsfilters: Fix TIFF parser bounds/validation issues [CVE-2025-57812]; clamp oversized PDF MediaBox-derived page size in pdftoraster [CVE-2025-64503]

securitylibphp-adodb: Fix SQL injection issue in sqlite(3) drivers [CVE-2025-54119]

securitylibvirt: Perform ACL checks earlier, preventing malicious users from potentially being able to crash the daemon [CVE-2025-12748]; ensure that newly-created snapshots are not world-readable [CVE-2025-13193]; apply the detect_zeroes settings across all layers of the backing chain instead of just the…

securitylxd: Fix broken idmapping with kernel 6.9+; tighten storage pool volume permissions [CVE-2025-64507]

securitymbedtls: New upstream stable release; fix timing issues [CVE-2025-54764 CVE-2025-59438]

securitymongo-c-driver: Avoid invalid memory reads [CVE-2025-12119]

securitynode-nodemailer: Fix addressparser recipient parsing for quoted nested addresses [CVE-2025-13033]

securitypgbouncer: Fix arbitary SQL execution issue [CVE-2025-12819]

securitypostgresql-17: New upstream stable release; check for CREATE privileges on the schema in CREATE STATISTICS [CVE-2025-12817]; avoid integer overflow in allocation-size calculations within libpq [CVE-2025-12818]

securityqemu: New upstream stable release; fix use after free issue [CVE-2025-11234]; fix buffer overflow issue [CVE-2025-12464]

securityr-cran-gh: Fix exposure of request headers in returned response objects [CVE-2025-54956]; ensure pagination passes authentication context explicitly; update tests and documentation

securityrlottie: Fix outlying coordinate rejection in FreeType rasteriser [CVE-2025-0634 CVE-2025-53074 CVE-2025-53075]

securityrsync: Fix out-of-bounds read via negative array index in sender file list handling [CVE-2025-10158]

securityrust-sequoia-openpgp: Fix buffer underflow in aes_key_unwrap [CVE-2025-67897]

securitysogo: Fix cross-site scripting issues [CVE-2025-63498 CVE-2025-63499]

securitysuricata: Fix verdict logging bounds checks [CVE-2025-64330]; fix various logging stack overflows [CVE-2025-64331 CVE-2025-64332 CVE-2025-64333 CVE-2025-64344]

securitysymfony: Fix PATH_INFO parsing [CVE-2025-64500]; drop failing Finder testsuite data entries

+69 more items in the release notes

13.2 Nov 15, 2025 Release notes ↗

security52 security advisories included: DSA-5979 libxslt, DSA-5993 chromium, DSA-5994 shibboleth-sp, DSA-5995 hsqldb1.8.0, DSA-5996 chromium, DSA-5997 imagemagick, DSA-5998 cups, DSA-5999 libjson-xs-perl, DSA-6000 libcpanel-json-xs-perl, DSA-6001 cjson, DSA-6002 node-sha.js, …

security7zip: New upstream release; security fixes [CVE-2025-55188 CVE-2025-11002 CVE-2025-11001]

fix7zip-rar: Add missing CRC table constructor

fixaide: Fix bin/buildcache use by running it from a root timer; various updates and fixes to included rules

fixallow-html-temp: New upstream version to support newer Thunderbird releases

fixalsa-ucm-conf-asahi: Install missing aop_audio UCM configs

fixansible: Update collections to maintain compatibility with ansible-core 2.19

fixansible-core: New upstream stable release; fix regression from 2.18 regarding handlers and play tags

fixasahi-scripts: Fix the macaudio default profile check; add the apple_nvmem_spmi module to the initramfs explicitly; make update-m1n1 idempotent

fixbase-files: Update for the point release

fixbrltty: atSpi2: do not manage widgets without text interface; avoid excessive verbose bluetooth/usbfs messages

fixconsole-setup: Update keyboard layouts dz(la) into dz(azerty-oss) and Use ca/multix variant instead of ca/multi; fix dz(azerty-oss/deadkeys) into dz, which is what xkb really provides; fix dz default layout

fixcups: Fix operation of checkboxes in admin interface

securitycurl: Fix buffer over-read issue [CVE-2025-9086]; fix cache poisoning issue [CVE-2025-10148]; fix path traversal issue [CVE-2025-11563]; allow --output to be overridden by --curl-options; fix manpage example for continue-at; fix path traversal issue [CVE-2025-11563]

fixdebian-edu-config: Use SERVER_ADDRESS in RewriteRule instead of hard-coded 'www'; drop desktop bundle from bundlesequence

securitydnsdist: Fix denial of service issues [CVE-2025-8671 CVE-2025-30187]

securityimagemagick: Fix integer overflow issue [CVE-2025-62171]

securitylemonldap-ng: Fix command injection issue [CVE-2025-59518]; don't expose session-id into Ajax responses; fix Google authentication

securitylibcommons-lang-java: Fix an uncontrolled recursion issue [CVE-2025-48924]

securitylibcommons-lang3-java: Fix an uncontrolled recursion issue [CVE-2025-48924]

securitylibhtp: Prevent memory leak with lzma [CVE-2025-53537]

securitylibsmb2: Fix buffer overflow issue [CVE-2025-57632]

securitylibssh: Fix NULL pointer dereference issue [CVE-2025-8114]; fix denial of service issue [CVE-2025-8277]

securitylibwebsockets: Fix denial of service issue [CVE-2025-11677]; fix buffer overflow issue [CVE-2025-11678]

securitylibxml2: Fix XPath recursion depth DoS [CVE-2025-9714]

securitylibyaml-syck-perl: Prevent memory corruption leading to str value being set on empty keys [CVE-2025-11683]

securitylog4cxx: Fix improper escaping issues [CVE-2025-54812 CVE-2025-54813]

securityluksmeta: Fix data corruption issue with LUKS1 [CVE-2025-11568]

securitymapserver: Fix SQL injection issue [CVE-2025-59431]

securitymodsecurity-apache: Fix security issues relating to response Content-Type handling [CVE-2025-54571]

securitynvidia-graphics-drivers-tesla-535: Fix use after free issue [CVE-2025-23280]; fix privilege escalation issue [CVE-2025-23282]; fix denial of service issues [CVE-2025-23300 CVE-2025-23330 CVE-2025-23332 CVE-2025-23345]

securityopen-vm-tools: Disable (default) the execution of the SDMP get-versions.sh script [CVE-2025-41244]

securityphpmyadmin: Address XSS vulnerability in bundled jquery.validate.js [CVE-2025-3573]

securitypoppler: Fix infinite recursion [CVE-2025-50420]

securitypython-eventlet: Fix HTTP request smuggling by discarding HTTP chunk trailers [CVE-2025-58068]

securityqemu: New upstream stable release; fix denial of service issue [CVE-2024-8354]; fix wrong emulation of FIBMAP and FIGETBSZ ioctls

securityrabbitmq-server: Fix logging on sensitive data [CVE-2025-50200]

securitysail: Fix memory corruption issues [CVE-2025-32468 CVE-2025-35984 CVE-2025-46407 CVE-2025-50129 CVE-2025-52456 CVE-2025-52930 CVE-2025-53085 CVE-2025-53510]

securitysamba: New upstream stable release; fix uninitialized memory disclosure issue [CVE-2025-9640], command injection issue [CVE-2025-10230]

securitysuricata: Fix uncontrolled memory use issue [CVE-2025-53538]; fix detection bypass issue [CVE-2025-59147]

+84 more items in the release notes

13.1 Sep 6, 2025 Release notes ↗

security14 security advisories included: DSA-5975 linux-signed-amd64 +2, DSA-5976 chromium, DSA-5977 aide, DSA-5978 webkit2gtk, DSA-5979 libxslt, DSA-5980 firefox-esr, DSA-5981 chromium, DSA-5983 qemu, DSA-5984 thunderbird, DSA-5986 node-cipher-base, DSA-5988 chromium, DSA-5989 udisks2, …

fixauto-apt-proxy: Check explicitly configured proxies before network gateway

fixbase-files: Update for the point release

fixcourier: Fix courier-webmin

fixdebian-installer: Increase Linux kernel ABI to 6.12.43+deb13; rebuild against proposed-updates; add a workaround for a GRUB graphics initialisation bug

fixdebian-installer-netboot-images: Rebuild against proposed-updates

fixdesktop-base: Fix placement of plymouth prompts in multi-monitor setups

fixdevscripts: Update suite and codename mappings

fixdpdk: New upstream point release

fixethtool: netlink: fix print_string when the value is NULL

securityfirebird3.0: Fix null pointer dereference in XDR message parsing [CVE-2025-54989]

fixflvstreamer: Stop installing rtmpsrv and rtmpsuck, avoiding file conflict with the rtmpdump package

fixgalera-4: New upstream stable release

securitygit: New upstream bug-fix release; fix arbitrary file write issues [CVE-2025-27613 CVE-2025-46835]; fix code execution issues [CVE-2025-27614 CVE-2025-48384]; fix protocol injection issue, possibly leading to arbitrary code execution [CVE-2025-48385]

fixglib2.0: New upstream bugfix release; fix a corner case when upgrading from bookworm

fixgnome-control-center: Fix a UI issue and an error display issue; translation updates

fixgnome-online-accounts: New upstream bug-fix release; update translations

fixgnome-shell: New upstream bugfix release

securitygolang-github-gin-contrib-cors: Fix mishandling of wildcards [CVE-2019-25211]

fixgssdp: New upstream bug-fix release; fix issues with Since: and Deprecated: declarations in documentation

securityimagemagick: Security fixes: heap buffer overflow in the InterpretImageFilename function [CVE-2025-53014]; infinite loop when writing during a specific XMP file conversion command [CVE-2025-53015]; memory leak in the magick stream command [CVE-2025-53019]; stack overflow through vsnprintf()…

fixinit-system-helpers: Fix handling of os-release diversions from live-build, ensuring they don't exist in non-live systems

fixinstallation-guide: Enable Hungarian and Ukrainian translations; fix boot-dev-select-arm64 and armhf-armmp-supported-platforms hyperlinks

securityiperf3: Fix buffer overflow issue [CVE-2025-54349]; fix assertion failure [CVE-2025-54350]

fixkamailio: Relax OpenSSL version check to only match against major version

fixlibadwaita-1: New upstream bugfix release

securitylibcgi-simple-perl: Fix HTTP response splitting issue [CVE-2025-40927]

securitylibcoap3: Fix buffer overflow issue [CVE-2024-0962]; fix integer overflow issue [CVE-2024-31031]

fixlibreoffice: Add EUR support for Bulgaria; fix installation of Impress sound effects; fix playing of videos in Impress under Qt6

fixlibrepo: New upstream bug-fix release, fixing support for DNF5; improve handling of SELinux in the Debian packaging

fixlinux: New upstream stable release

fixlinux-signed-amd64: New upstream stable release

securitymozjs128: New upstream stable release; fix uninitialised memory issue [CVE-2025-9181], memory safety issues [CVE-2025-9185]

securitynginx: Fix potential information leak in ngx_mail_smtp_module [CVE-2025-53859]

securitynode-tmp: Fix arbitrary file write issue [CVE-2025-54798]

securityopenjpeg2: Fix out-of-bounds write issue [CVE-2025-54874]

securitypcre2: New upstream stable release; fix potential information disclosure issue [CVE-2025-58050]

securitypostgresql-17: New upstream stable release; tighten security checks in planner estimation functions [CVE-2025-8713]; prevent pg_dump scripts from being used to attack the user running the restore [CVE-2025-8714]; convert newlines to spaces in names included in comments in pg_dump output…

securityshaarli: Fix cross site scripting issue [CVE-2025-55291]

securitywolfssl: Avoid weak and predictable random numbers [CVE-2025-7394]

+32 more items in the release notes

12.15 Jul 11, 2026 Release notes ↗

security84 security advisories included: DLA-4627 kernel-wedge, DLA-4628 linux-base, DLA-4632 atril, DLA-4633 libreoffice, DLA-4635 firefox-esr, DLA-4636 thunderbird, DLA-4637 libconfig-inifiles-perl, DLA-4638 libgd-perl, DLA-4639 libhttp-daemon-perl, DLA-4642 u-boot, DLA-4643 imagemagick, …

security7zip: New upstream stable release; fix buffer overflow issues [CVE-2026-48092 CVE-2026-48095]; fix memory disclosure issue [CVE-2026-48101]; fix out-of-bounds read issues [CVE-2026-48102 CVE-2026-48103 CVE-2026-48111 CVE-2026-48112]; fix uninitialised memory read issue [CVE-2026-48104]

securityapache2: Fix HTTP/2 request DoS and file handle exhaustion [CVE-2026-49975 CVE-2026-48913]; fix proxy, DAV, LDAP, SSL, XML and header memory/crash issues [CVE-2026-29167 CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 CVE-2026-44185]; fix proxy FTP directory listing XSS…

securitybeets: Fix XSS vulnerability [CVE-2026-42052]; fix build-time test failures

securitycalibre: Fix various potential security issues; read resources only from book contents [CVE-2026-33206]; keep extracted files within container dir [CVE-2026-30853]; prevent reading background images from outside the config dir [CVE-2026-33205]

securitycomposer: Fix support for new GitHub token format [CVE-2026-45793]

securitycurl: Fix cache poisoning issue [CVE-2025-10148]; fix data leak issues [CVE-2025-14524 CVE-2026-3783]; fix incorrect connection re-use issues [CVE-2025-14819 CVE-2026-3784 CVE-2026-5773 CVE-2026-7168]

securitydhcpcd5: Fix NULL pointer dereference issue [CVE-2025-70102]; fix out-of-bounds write issue [CVE-2026-56114]

securityfirewalld: Fix DBUS policy checking [CVE-2026-4948]

securitygiflib: Fix memory corruption issues [CVE-2026-23868 CVE-2026-26740]

securitygraphite2: Fix out-of-bounds write [CVE-2026-50593]

securityironic: Fix file disclosure via image sources [CVE-2025-44021]; fix console command injection [CVE-2026-42510]; fix Swift token disclosure [CVE-2026-42997]; fix unsafe template execution [CVE-2026-44916]

securitykeystone: Fix behaviour of user_enabled_invert [CVE-2026-40683]; prevent unauthorized EC2 credential creation and deletion [CVE-2026-33551]

securitylibbytes-random-secure-perl: Fix incorrect usage of seed in PRNG [CVE-2026-11625]

securitylibcaca: Prevent undefined behaviour in overflow check [CVE-2026-42046]

securitylibhtml-gumbo-perl: Fix uninitialized memory access [CVE-2025-15646]

securitylibhtml-parser-perl: Fix heap-use-after-free in _decode_entities [CVE-2026-8829]

securitylibnet-cidr-lite-perl: Fix IP/CIDR parser validation: reject non-ASCII digits and trailing newlines [CVE-2026-55190]; reject zero-padded CIDR masks [CVE-2026-45191]

securitylibvncserver: Fix buffer overflow and out-of-bounds write [CVE-2026-44988 CVE-2026-50538]

securitylibxml-libxml-perl: Fix out-of-bounds read [CVE-2026-8177]

securitylibxml2: Fix catalogue recursion and duplicate-catalog handling [CVE-2025-8732 CVE-2026-0990 CVE-2026-0992]; limit RelaxNG include recursion [CVE-2026-0989]; fix xmllint shell memory leak [CVE-2026-1757]; correct schematron regression-test outputs [CVE-2025-49794 CVE-2025-49796]; fix XML writer…

securitymariadb: New upstream stable release; fix code execution issues [CVE-2025-13699 CVE-2026-44168 CVE-2026-48163 CVE-2026-48165 CVE-2026-49261]; fix denial of service issues [CVE-2026-21968 CVE-2026-34303]; fix logging bypass issue [CVE-2026-3494]; fix path traversal issue [CVE-2026-44171]; fix SQL…

securitymesa: Fix WebGPU/SPIR-V allocation handling [CVE-2026-40393]

securitymodsecurity: Prevent denial of service in hexDecode handling [CVE-2026-30923]; prevent denial of service in SSN/CPF/SVNR verification [CVE-2026-42268]

securitymxml: Fix out-of-bounds read [CVE-2026-5037]

securitynode-flatted: Fix prototype pollution issue [CVE-2026-33228]

securityopenslide: Fix possible code execution issue [CVE-2026-48977]

securityp7zip: New upstream stable release; fix buffer overflow issues [CVE-2026-48092 CVE-2026-48095]; fix memory disclosure issue [CVE-2026-48101]; fix out-of-bounds read issues [CVE-2026-48102 CVE-2026-48103 CVE-2026-48111 CVE-2026-48112]; fix uninitialised memory read issue [CVE-2026-48104]

securityphp-guzzlehttp-psr7: Fix Host authority validation [CVE-2026-48998]; reject control characters in URI hosts [CVE-2026-49214]; harden ServerRequest globals handling; normalise global header values; encode literal plus signs in query helpers

securityphpunit: Fix unsafe deserialization in PHPT code coverage handling [CVE-2026-24765]

securityprotobuf: Fix parser recursion limits [CVE-2024-7254 CVE-2025-4565 CVE-2026-0994 CVE-2026-6409]

securitypydantic: Fix denial of service in email verification [CVE-2024-3772]

securitypymatgen: Fix denial of service in GaussianInput.from_string [CVE-2022-42964]

securitypython-filelock: Fix symlink vulnerabilies [CVE-2025-68146 CVE-2026-22701]

securitypython-markdown: Fix parsing of bogus HTML markup [CVE-2025-69534]

securitypython-pyramid: Fix information disclosure issue [CVE-2023-40587]

securitypython-xmltodict: Fix XML injection issue [CVE-2025-9375]

securitypython3.11: Prevent incorrect tar archive handling [CVE-2025-13462]; ensure bytecode-only imports use normal security checks [CVE-2026-2297]; reject unsafe cookie values [CVE-2026-3644]; prevent XML parser crashes [CVE-2026-4224]; prevent browser command injection [CVE-2026-4519]; prevent bz2/lzma…

+49 more items in the release notes

12.14 May 16, 2026 Release notes ↗

security131 security advisories included: DSA-6003 firefox-esr, DSA-6025 firefox-esr, DSA-6054 firefox-esr, DSA-6078 firefox-esr, DSA-6093 gimp, DSA-6094 libsodium, DSA-6096 vlc, DSA-6097 chromium, DSA-6098 net-snmp, DSA-6100 chromium, DSA-6101 firefox-esr, DSA-6102 python-urllib3, …

security7zip: New upstream stable release; fix integer underflow issue [CVE-2023-31102]; fix code execution issues [CVE-2023-40481 CVE-2025-11001 CVE-2025-11002]; fix denial of service issue [CVE-2024-11612]; fix null pointer dereference issue [CVE-2025-53817]; fix handling of symbolic links…

securityapache2: New upstream release: fix http2 regression; fix use-after-free issue [CVE-2026-23918]; fix privilege escalation issue [CVE-2026-24072]; fix NULL pointer dereference issues [CVE-2026-29169 CVE-2026-33007]; fix authentication bypass issue [CVE-2026-33006]; fix HTTP response splitting issue…

securityarduino-core-avr: New upstream stable release; fix buffer overflow issue [CVE-2025-69209]

securityaugeas: Fix NULL pointer dereference issue [CVE-2025-2588]

securityawstats: Prevent command injection [CVE-2025-63261]

securitybusybox: Fix stack overflow [CVE-2022-48174] and use-after-free [CVE-2023-42363 CVE-2023-42364 CVE-2023-42365] errors

securityc3p0: Fix recursive entity expansion issue [CVE-2019-5427]

securitycomposer: Fix code execution issue [CVE-2023-43655]; fix command injection issues [CVE-2026-40261 CVE-2026-40176]

securitycontainerd: Fix CRI Attach implementation [CVE-2025-64329]; fix overly broad directory permissions [CVE-2024-25621]; fix large UID:GID (> 32bit) overflow [CVE-2024-40635]

securitydovecot: Correct incomplete backport of CVE-2026-27855 fix; fix memory leak in CVE-2026-27857 fix

securitydpkg: New upstream stable release; fix insufficient permissions check leading to possible denial of service issue [CVE-2025-6297]; fix denial of service issue [CVE-2026-2219]; fix buffer over-read issue; fix uninitialized variable warning with Rules-Requires-Root; fix segmentation fault in…

securityerlang: Fix denial of service issues [CVE-2025-48038 CVE-2025-48039 CVE-2025-48040 CVE-2025-48041]; fix HTTP request smuggling issue [CVE-2026-23941]; fix path traversal issues [CVE-2026-23942 CVE-2026-21620]; fix compression bomb issue [CVE-2026-23943]

securityfonttools: Fix XML External Entity injection issue [CVE-2023-45139]; fix code execution issue [CVE-2025-66034]

securityglance: Fix server-side request forgery issue [CVE-2026-34881]; fix build failure

securityglibc: Fix integer overflow issue [CVE-2026-0861]; fix uninitialised memory use issue [CVE-2025-15281]; fix incorrect handling of DNS responses [CVE-2026-4437]; fix return of invalid DNS hostnames [CVE-2026-4438]; fix assertion failure [CVE-2026-4046]; fix performance bottleneck with ASAN on…

securitygpsd: Fix out-of-bounds write issue [CVE-2025-67268]; fix integer underflow issue [CVE-2025-67269]

securitygrub-efi-amd64-signed: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix…

securitygrub-efi-arm64-signed: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix…

securitygrub-efi-ia32-signed: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix…

securitygrub2: Remove NTFS and jfs from monolithic EFI image; update SBAT levels; set Protected: yes for -signed packages so they cannot easily be removed; backport upstream regression fixes; fix video/readers/jpeg: Do not permit duplicate SOF0 markers in JPEG [CVE-2024-45774]; fix commands/extcmd:…

securitygvfs: Use control connection address for PASV data [CVE-2026-28295]; reject paths containing CR/LF characters [CVE-2026-28296]

securitykissfft: Fix integer overflow issues [CVE-2025-34297 CVE-2026-41445]

securitylibarchive: Fix out-of-bounds read issues [CVE-2025-5918 CVE-2026-4424]; fix denial of service issues [CVE-2026-4111 CVE-2026-4426]; fix possible code execution issue [CVE-2026-5121]

securitylibcap2: Fix time of check / time of use issue [CVE-2026-4878]; rebuild with updated glibc

securitylibexif: Fix integer underflow issues [CVE-2026-40386 CVE-2026-32775]; fix integer overflow issue [CVE-2026-40385]

securitylibnet-cidr-lite-perl: Fix ACL bypass issues [CVE-2026-40198 CVE-2026-40199]

securitylibpng1.6: Fix heap buffer overflow issues [CVE-2026-22801 CVE-2026-22695]

securitylibreoffice: Fix incomplete fix for CVE-2024-12426

securitylibuev: Fix buffer overrun issue [CVE-2022-48620]

securitylibvncserver: Fix out-of-bounds read issue [CVE-2026-32853]; fix null pointer dereference issue [CVE-2026-32854]

securitylibxml-security-java: Fix private key disclosure issue [CVE-2023-44483]

securitylxc: Fix authorisation bypass issue [CVE-2026-39402]

securitymapserver: Fix SQL injection issue [CVE-2025-59431]; fix buffer overflow issue [CVE-2026-33721]; fix heap-buffer-overflow and double-free issues in maplexer

securitymodsecurity-crs: Fix rule bypass issue [CVE-2023-38199]; fix file extension blocking bypass issue [CVE-2026-33691]

securitynginx: Fix buffer overflow issues [CVE-2026-27654 CVE-2026-27784 CVE-2026-32647]; fix session authentication issues [CVE-2026-27651 CVE-2026-28753]; fix OCSP result bypass issue [CVE-2026-28755]; use $host instead of $http_host

+60 more items in the release notes

12.13 Jan 10, 2026 Release notes ↗

security77 security advisories included: DSA-5979 libxslt, DSA-5993 chromium, DSA-5994 shibboleth-sp, DSA-5996 chromium, DSA-5997 imagemagick, DSA-5998 cups, DSA-5999 libjson-xs-perl, DSA-6000 libcpanel-json-xs-perl, DSA-6001 cjson, DSA-6002 node-sha.js, DSA-6003 firefox-esr, DSA-6004 chromium, …

securityangular.js: Fix regular expression-based denial of service issues [CVE-2022-25844 CVE-2023-26116 CVE-2023-26117 CVE-2023-26118]; fix restriction bypass issues [CVE-2024-8372 CVE-2024-8373]; fix denial of service issue [CVE-2024-21490]; fix improper sanitization issues [CVE-2025-0716 CVE-2025-2336]

securitycalibre: Fix code execution issue [CVE-2025-64486]

securitycomposer: Fix ANSI sequence injection [CVE-2025-67746]

securityfreerdp2: New upstream release; fix multiple memory-safety vulnerabilities: integer overflow/underflow and out-of-bounds write in NSC, Clear, and GDI bitmap codecs [CVE-2024-22211 CVE-2024-32037 CVE-2024-32038 CVE-2024-32039 CVE-2024-32040]; out-of-bounds reads in ZGFX, Planar, NCRUSH,…

securitygdk-pixbuf: Fix buffer overflow issue [CVE-2025-7345]

securitygit: Fix arbitrary file creation/truncation in gitk [CVE-2025-27613]; prevent arbitrary file overwrite in git-gui with crafted directory names [CVE-2025-46835]; correct submodule path parsing with trailing CR [CVE-2025-48384]; validate bundle-uri to prevent protocol injection during clone…

securityglib2.0: Fix various integer overflow issues [CVE-2025-13601 CVE-2025-14087 CVE-2025-14512]

securityimagemagick: Fix denial of service issues [CVE-2025-62594 CVE-2025-68618]; fix use-after-free issue [CVE-2025-65955]; fix integer overflow issues [CVE-2025-62171 CVE-2025-66628 CVE-2025-69204]; fix infinite loop issue [CVE-2025-68950]

securitylemonldap-ng: Fix sessions tablename when not default; fix oidc flow when user encountered an error on server side; fix Kerberos JavaScript when used with Choice; improve CORS checking; fix path_info handling; fix shell injection issue [CVE-2025-59518]; hide session id from Ajax responses

securitylibcommons-lang-java: Fix uncontrolled recursion issue [CVE-2025-48924]

securitylibcommons-lang3-java: Fix uncontrolled recursion issue [CVE-2025-48924]

securitylibhtp: Fix denial of service issue via unbounded HTTP header processing [CVE-2024-23837 CVE-2024-45797]

securitylibnginx-mod-http-lua: Fix HTTP HEAD request smuggling [CVE-2024-33452]

securitylibphp-adodb: Fix SQL injection in sqlite and sqlite3 metadata lookups [CVE-2025-54119]

securitylibssh: Fix integer overflow issue [CVE-2025-4877]; fix use of uninitialized variable [CVE-2025-4878]; fix out of bounds memory access issue [CVE-2025-5318]; fix double free issue [CVE-2025-5351]; fix use of uninitialized memory [CVE-2025-5372 CVE-2025-5987]; fix null pointer dereference issue…

securitylibxml2: Fix denial of service issue [CVE-2025-9714]

securitylog4cxx: Fix improper escaping issues [CVE-2025-54812 CVE-2025-54813]

securityluksmeta: Fix data corruption issue with LUKS1 [CVE-2025-11568]

securitymodsecurity-apache: Fix request body error handling to propagate Apache filter/read failures correctly [CVE-2025-54571]; map request body read failures to appropriate HTTP status codes; simplify request body error propagation in mod_security2

securitymongo-c-driver: Avoid invalid memory reads [CVE-2025-12119]

securitymydumper: Fix arbitrary file read issue [CVE-2025-30224]

securitynvidia-graphics-drivers: New upstream bugfix release [CVE-2025-23279 CVE-2025-23286]

securitynvidia-open-gpu-kernel-modules: New upstream bugfix release [CVE-2025-23279 CVE-2025-23286]

securityopen-vm-tools: Disable SDMP service version collection by default to mitigate local privilege escalation [CVE-2025-41244]

securityopenrefine: Fix MySQL host parameter injection in JDBC URL parsing [CVE-2024-23833]; fix reflected XSS in gdata OAuth callback handler [CVE-2024-47878]; fix content-type confusion XSS in ExportRows endpoint [CVE-2024-47880]; prevent remote or extension loading via SQLite connection URL…

securitypam: Fix local privilege escalation in pam_namespace [CVE-2025-6020]

securitypgbouncer: Fix arbitary SQL execution issue [CVE-2025-12819]; fix expired password use issue [CVE-2025-2291]

securitypostgresql-15: New upstream stable release; check for CREATE privileges on the schema in CREATE STATISTICS [CVE-2025-12817]; avoid integer overflow in allocation-size calculations within libpq [CVE-2025-12818]

securityqemu: New upstream stable release; fix qemu-img info https://example.com; fix migration of guests using virtio-net; fix use after free issue [CVE-2025-11234]

securityr-cran-gh: Fix sensitive data leak issue [CVE-2025-54956]

securityrear: Prevent created initrd from being world-readable when GRUB_RESCUE=y [CVE-2024-23301]

securityrlottie: Fix outlying coordinate rejection in FreeType rasteriser [CVE-2025-0634 CVE-2025-53074 CVE-2025-53075]

securityrsync: Improve test coverage for future updates; fix out-of-bounds read via negative array index in sender file list handling [CVE-2025-10158]

securityruby-sinatra: Fix regular expression-based denial of service issue [CVE-2025-61921]

securitysamba: Fix information leak issue [CVE-2018-14628]; fix command injection issue [CVE-2025-10230]; fix uninitialized memory disclosure issue [CVE-2025-9640]

securitysogo: Fix HTML injection issue [CVE-2023-48104]; fix CSS injection issue [CVE-2024-24510]; fix cross-site scripting issues [CVE-2025-63498 CVE-2025-63499]; fix crash on invalid mailIdentities

+57 more items in the release notes