A Chromium security update has been released for Debian GNU/Linux 12 (Bookworm):
[DSA 5920-1] chromium security update
[DSA 5920-1] chromium security update
Updated open-vm-tools packages are available for Debian GNU/Linux 11 (Bullseye) LTS and 12 (Bookworm):
[DLA 4165-1] open-vm-tools security update
[DSA 5919-1] open-vm-tools security update
[DLA 4165-1] open-vm-tools security update
[DSA 5919-1] open-vm-tools security update
A security update for Varnish has been issued for Debian GNU/Linux 12 (Bookworm) to resolve an issue where improper parsing of chunked transfer encodings in the Varnish web accelerator could lead to HTTP request smuggling or cache poisoning:
[DSA 5918-1] varnish security update
[DSA 5918-1] varnish security update
Debian GNU/Linux has received several security updates, including redis, libeconf, and rubygems:
Debian GNU/Linux 8 (Jessie), 9 (Stretch), and 10 (Buster) Extended LTS:
ELA-1420-1 redis security update
Debian GNU/Linux 11 (Bookworm) LTS:
[DLA 4162-1] redis security update
[DLA 4164-1] libeconf security update
[DLA 4163-1] rubygems security update
Debian GNU/Linux 8 (Jessie), 9 (Stretch), and 10 (Buster) Extended LTS:
ELA-1420-1 redis security update
Debian GNU/Linux 11 (Bookworm) LTS:
[DLA 4162-1] redis security update
[DLA 4164-1] libeconf security update
[DLA 4163-1] rubygems security update
A WPA security update has been issued for Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1419-1 wpa security update
ELA-1419-1 wpa security update
Debian GNU/Linux 11 LTS has received several security updates, including fossil, postgresql-13, libbson-xs-perl, and simplesamlphp security updates:
[DLA 4158-1] fossil security update
[DLA 4159-1] postgresql-13 security update
[DLA 4160-1] libbson-xs-perl security update
[DLA 4161-1] simplesamlphp security update
[DLA 4158-1] fossil security update
[DLA 4159-1] postgresql-13 security update
[DLA 4160-1] libbson-xs-perl security update
[DLA 4161-1] simplesamlphp security update
Steven Barrett has released a new Liquorix kernel derived from Linux kernel 6.14.6. The Liquorix Linux kernel is an enthusiast Linux kernel that is optimized for low-latency computing in audiovisual production, reduced frame time variations in games, and unparalleled responsiveness in interactive systems. It is available for Debian, Ubuntu, and Arch Linux.
Debian GNU/Linux has been updated with multiple security enhancements, encompassing libapache2-mod-auth-openidc, openssh, and request-tracker4.
Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1418-1 request-tracker4 security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4155-1] libapache2-mod-auth-openidc security update
[DLA 4156-1] openssh security update
[DLA 4157-1] request-tracker4 security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5917-1] libapache2-mod-auth-openidc security update
Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1418-1 request-tracker4 security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4155-1] libapache2-mod-auth-openidc security update
[DLA 4156-1] openssh security update
[DLA 4157-1] request-tracker4 security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5917-1] libapache2-mod-auth-openidc security update
Debian GNU/Linux has been updated with two important security updates: MariaDB 10.5 for Debian 11 LTS and Chromium for Debian 12
[DLA 4154-1] mariadb-10.5 security update
[DSA 5916-1] chromium security update
[DLA 4154-1] mariadb-10.5 security update
[DSA 5916-1] chromium security update
Updated golang-glog packages are now available for Debian GNU/Linux 10 (Buster) Extended LTS to resolve a vulnerability that allows an unprivileged attacker to predict the log file path of a privileged process and potentially create a symbolic link to a sensitive file in its place.
ELA-1417-1 golang-glog security update
ELA-1417-1 golang-glog security update
Installable live ISO images for the forthcoming Debian 13 Trixie release are now available for testing purposes. The images are offered in various environments including GNOME, KDE, Xfce, Cinnamon, MATE, LXQt, and LXDE, and they include the most recent versions of the packages. Debian 13 Trixie is presently undergoing an initial freeze, with the final version anticipated in the coming months.
Debian GNU/Linux has released several security updates, including ansible regression update, containerd security update, and libuv1 security update.
Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1416-1 libuv1 security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 3695-2] ansible regression update
[DLA 4153-1] containerd security update
Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1416-1 libuv1 security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 3695-2] ansible regression update
[DLA 4153-1] containerd security update
Debian GNU/Linux has been updated with two security patches: [DSA 5915-1] vips security update for Debian 12 and ELA-1415-1 nodejs security update for Debian 10 ELTS:
[DSA 5915-1] vips security update
ELA-1415-1 nodejs security update
[DSA 5915-1] vips security update
ELA-1415-1 nodejs security update
Steven Barrett has released a new Liquorix kernel derived from Linux kernel 6.14.5. The Liquorix Linux kernel is an enthusiast Linux kernel that is optimized for low-latency computing in audiovisual production, reduced frame time variations in games, and unparalleled responsiveness in interactive systems. It is available for Debian, Ubuntu, and Arch Linux.
New PostgreSQL packages have been made available for Debian GNU/Linux 9 (Stretch) Extended LTS to resolve a vulnerability stemming from inadequate neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn(). This issue permits a database input provider to execute SQL injection under specific usage scenarios.
ELA-1414-1 postgresql-9.6 security update
ELA-1414-1 postgresql-9.6 security update
Debian GNU/Linux has been updated with various security enhancements, including updates for golang-github-gorilla-csrf, openjdk-17, thunderbird, chromium, nodejs, and mysql-connector-python:
Debian GNU/Linux 9 (Stretch) Extended LTS:
ELA-1413-1 mysql-connector-python security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4151-1] golang-github-gorilla-csrf security update
[DLA 4152-1] nodejs security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5913-1] openjdk-17 security update
[DSA 5912-1] thunderbird security update
[DSA 5914-1] chromium security update
Debian GNU/Linux 9 (Stretch) Extended LTS:
ELA-1413-1 mysql-connector-python security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4151-1] golang-github-gorilla-csrf security update
[DLA 4152-1] nodejs security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5913-1] openjdk-17 security update
[DSA 5912-1] thunderbird security update
[DSA 5914-1] chromium security update
Debian GNU/Linux has been updated with multiple security enhancements, including LibXML2, Expat, Firefox-ESR, VIPS, fig2dev, and QEMU:
Debian GNU/Linux 8 (Jessie), 9 (Stretch), and 10 (Buster):
ELA-1412-1 libxml2 security update
Debian GNU/Linux 9 (Stretch) and 10 (Buster):
ELA-1411-1 expat security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4146-1] libxml2 security update
[DLA 4145-1] expat security update
[DLA 4150-1] u-boot security update
[DLA 4149-1] nagvis security update
[DLA 4126-2] jinja2 regression update
[DLA 4148-1] vips security update
[DLA 4147-1] fig2dev security update
[DLA 4144-1] qemu security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5911-1] request-tracker4 security update
[DSA 5909-1] request-tracker5 security update
[DSA 5910-1] firefox-esr security update
Debian GNU/Linux 8 (Jessie), 9 (Stretch), and 10 (Buster):
ELA-1412-1 libxml2 security update
Debian GNU/Linux 9 (Stretch) and 10 (Buster):
ELA-1411-1 expat security update
Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4146-1] libxml2 security update
[DLA 4145-1] expat security update
[DLA 4150-1] u-boot security update
[DLA 4149-1] nagvis security update
[DLA 4126-2] jinja2 regression update
[DLA 4148-1] vips security update
[DLA 4147-1] fig2dev security update
[DLA 4144-1] qemu security update
Debian GNU/Linux 12 (Bookworm):
[DSA 5911-1] request-tracker4 security update
[DSA 5909-1] request-tracker5 security update
[DSA 5910-1] firefox-esr security update
Debian GNU/Linux 11 (Bullseye) LTS has been updated with two security patches for libraw and glibc:
[DLA 4142-1] libraw security update
[DLA 4143-1] glibc security update
[DLA 4142-1] libraw security update
[DLA 4143-1] glibc security update
Debian GNU/Linux has received two security updates: [DLA 4141-1] poppler for Debian 11 LTS and [DSA 5908-1] libreoffice for Debian 12
[DLA 4141-1] poppler security update
[DSA 5908-1] libreoffice security update
[DLA 4141-1] poppler security update
[DSA 5908-1] libreoffice security update
Installable live ISO images for the forthcoming Debian 13 Trixie release are now available for testing purposes. The images are offered in various environments including GNOME, KDE, Xfce, Cinnamon, MATE, LXQt, and LXDE, and they include the most recent versions of the packages. Debian 13 Trixie is presently undergoing an initial freeze, with the final version anticipated in the coming months.
