LibPNG, Roundcube, Ceph, and more updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Several security updates have been released for Debian systems, including updates for Roundcube webmail and libpng image library. These updates address multiple vulnerabilities that could lead to information disclosure or denial-of-service attacks, including issues with HTML sanitization and buffer overflows. The updates are available for various Debian versions, including Bullseye, Bookworm, and Trixie, and users are advised to upgrade their packages as soon as possible. Additionally, a security update has been released for Ceph distributed storage and file system, which fixed an issue with SSL certificate checking in the Python bindings.

Debian GNU/Linux 9 (Stretch) and 10 (Buster) Extended LTS:
ELA-1647-1 libpng1.6 security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4480-1] roundcube security update
[DLA 4481-1] libpng1.6 security update
[DLA 4482-1] ceph security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6137-1] roundcube security update
[DSA 6138-1] libpng1.6 security update

Wireshark security update for Debian 9, 10, and 12

Debian 11106 Published by Philipp Esselbach 0

Important security updates have been released for Wireshark, a network traffic analyzer. The updates address multiple vulnerabilities that could allow denial of service via packet injection or crafted capture files, including crashes and infinite loops in various dissectors. Affected versions include 2.6.20-0+deb10u9~deb9u2 for Debian GNU/Linux 9 (Stretch) ELTS, 10 (Buster), and 12 (Bullseye).

ELA-1646-1 wireshark security update
[DLA 4479-1] wireshark security update

BTF Disabled in Liquorix Kernel 6.18-12: Focus on Low-Latency Power for Debian, Ubuntu, and Arch

Debian 11106 Ubuntu 7262 Arch Linux 1039 Published by Philipp Esselbach 0

The new Liquorix Kernel 6.18-12 offers improved low-latency power for Debian, Ubuntu, and Arch systems without sacrificing stability. It drops support for BTF module loading to achieve faster boot times on older hardware and lower input latency with a built-in scheduler swap to Kyber or BFQ. Users can install the kernel quickly using an official script that auto-detects their system type, or build their own packages with Docker for a more transparent workflow. The Liquorix kernel features various low-latency improvements such as Zen Interactive Tuning and High-Resolution 1000 Hz Tick, making it ideal for gaming and real-time tasks.

Installing PHP 8.5.3, 8.4.18, and Backported Security Builds on Debian with Ondřej Surý's Repository

Debian 11106 Published by Philipp Esselbach 0

Ondřej Surý has released updated PHP packages for Debian users, including PHP 8.5.3 and 8.4.18, which offer improved performance, bug fixes, and security patches over Debian's native PHP stack. By adding Surý's repository to their system, users can access the latest PHP versions without having to wait months for official updates or turn their system into a "Frankenstein build." To install these packages, users need to ensure their host can speak HTTPS to apt and then run a series of commands to fetch the signing key, add the repository source, and refresh the package index. With Surý's repository in place, users can easily upgrade to the latest PHP versions using standard apt-get commands and stay ahead of security issues without extensive maintenance efforts.

Installing Xanmod Kernel 6.12.71 on Debian-Based Systems: A Step-by-Step Guide

Debian 11106 Ubuntu 7262 Published by Philipp Esselbach 0

Xanmod Kernel 6.12.71 is now available, based on the latest Linux LTS kernel that features a range of targeted fixes including improvements for virtual-socket tests, asynchronous I/O, and VLAN packet handling in tunnels. This updated kernel offers stability and performance enhancements, and can be installed on Debian, Ubuntu, or derivative systems. A step-by-step guide will walk you through the process of installing the Xanmod LTS kernel, explaining each command and how to avoid common issues with DKMS modules.

Chromium security update for Debian 12 and 13

Debian 11106 Published by Philipp Esselbach 0

A security update has been released for the Chromium package in Debian to fix several vulnerabilities. The issues discovered could allow attackers to execute arbitrary code, cause a denial of service, or disclose sensitive information. Versions 145.0.7632.75-1deb12u1 and 145.0.7632.75-1deb13u1 have been released for the oldstable and stable distributions respectively.

[DSA 6135-1] chromium security update

Unleash Low-Latency Power: Liquorix Kernel 6.18-11 is Now Available

Debian 11106 Ubuntu 7262 Arch Linux 1039 Published by Philipp Esselbach 0

A new version of the Liquorix Kernel 6.18-11 has been released, bringing low-latency tweaks, latency-driven improvements, and an optional Docker build pipeline to Debian, Ubuntu, and Arch systems. For most users, the official install script can be used to easily install a drop-in replacement kernel with reduced input latency without any manual configuration. Power users who prefer a transparent build chain can use Docker to compile their own packages from source, allowing for customization of signing and packaging options. The Liquorix kernel brings several low-latency features, including Zen Interactive Tuning, Background Hugepage Reclaim, and High-Resolution 1000 Hz Tick, making it a great solution for gaming, audio production, and other interactive workloads.

Linux Kernel, ClamAV, PDNS-Recursor updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Several security updates have been released for various Debian packages, including ClamAV and Linux kernel versions 5.10 and 6.1. These updates address multiple vulnerabilities that could lead to privilege escalation, denial of service, or information leaks. Additionally, a security update has been issued for PDNS Recursor due to two vulnerabilities that can cause denial of service when processing malformed zone files. Users are advised to upgrade their packages to the latest versions available in order to stay secure.

Debian GNU/Linux 9 (Stretch) and 10 (Buster) Extended LTS:
ELA-1644-1 linux-5.10 security update
ELA-1643-1 linux-6.1 security update

Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1645-1 clamav new upstream version

Debian GNU/Linux 13 (Trixie):
[DSA 6134-1] pdns-recursor security update

HAProxy, PostgreSQL, Nginx updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Debian has released several security advisories to address vulnerabilities in various packages, including HAProxy, PostgreSQL, and Nginx. The advisory for HAProxy (DSA-6130-1) warns that an attacker can cause a denial-of-service attack by sending specially crafted data, and recommends upgrading to version 3.0.11-1+deb13u2. Meanwhile, multiple security issues were discovered in PostgreSQL (CVEs 2026-2003-2006), which may result in memory disclosure or code execution, and the advisory recommends updating to version 17.8-0+deb13u1 for the stable distribution or 15.16-0+deb12u1 for the oldstable distribution. Nginx has also been updated (DSA-6131-1) to fix a vulnerability that made it possible for an attacker to inject malicious code into upstream TLS servers, and users are recommended to upgrade to version 1.22.1-9+deb12u4 or 1.26.3-3+deb13u2.

[DSA 6130-1] haproxy security update
[DSA 6133-1] postgresql-17 security update
[DSA 6132-1] postgresql-15 security update
[DSA 6131-1] nginx security update

Install XanMod Kernel 6.18.10 or 6.12.70 LTS on Debian-Based Systems for Maximum Speed and Efficiency

Debian 11106 Ubuntu 7262 Published by Philipp Esselbach 0

The XanMod kernel offers improved performance with its block-layer runqueue tweaks and revamped scheduler, resulting in smoother multitasking. It also includes aggressive x86_64 optimizations from LLVM's ThinLTO for better I/O boosts. For low-latency workloads like audio production, robotics, or gaming, the linux-xanmod-rt package is available, which ships a PREEMPT_RT-enabled kernel based on 6.18 with deterministic scheduling. The XanMod kernel is compatible with various drivers, including NVIDIA and VirtualBox, although some may require reinstalling under new headers to work properly.

Linux kernel updates for Debian 11 LTS

Debian 11106 Published by Philipp Esselbach 0

Debian has released two security updates for the Linux kernel: DLA-4476-1 and DLA-4475-1. These updates, which address multiple vulnerabilities in the Linux kernel, affect Debian GNU/Linux 11 (Bullseye) LTS and may lead to privilege escalation, denial of service, or information leaks if left unpatched. The vulnerabilities were fixed in versions 6.1.162-1~deb11u1 for DLA-4476-1 and 5.10.249-1 for DLA-4475-1, which also include fixes for several reported bugs.

[DLA 4476-1] linux-6.1 security update
[DLA 4475-1] linux security update

Python, Pypy, Munge, and Tcpflow updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Multiple security updates have been released for various Debian packages, including Python (python3.7, python3.5, and python2.7) and PyPy (pypy), which address vulnerabilities that can lead to memory corruption, email and HTTP headers injection, and denial of service (DoS). The updates also include a fix for the munge authentication service, which had a buffer overflow vulnerability that could allow local users to leak the MUNGE cryptographic key. Additionally, a security update was released for the tcpflow package, which contained a wrong length check in its 802.11 management frame parser that can cause an out-of-bounds write and potentially lead to code execution.

Debian GNU/Linux 9 (Stretch) Extended LTS:
ELA-1641-1 python3.5 security update

Debian GNU/Linux 9 (Stretch) and 10 (Buster) Extended LTS:
ELA-1640-1 python2.7 security update

Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1642-1 python3.7 security update
ELA-1639-1 pypy security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4477-1] munge security update
[DLA 4478-1] tcpflow security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6129-1] munge security update

PHP Unit, Rlottie, Kernel, and more updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Multiple security updates have been released for various Debian packages, including phpunit, usbmuxd, rlottie, shaarli, and linux. The updates address vulnerabilities such as path traversal issues, missing input sanitizing, and unsafe deserialization that could lead to privilege escalation, denial of service, or information leaks. The affected versions include phpunit 7.5.6-1+deb10u1, usbmuxd 1.1.1-2+deb12u1 and 1.1.1-6+deb13u1, rlottie 0.1+dfsg-2+deb11u1, shaarli 0.14.0+dfsg-2+deb13u1, and linux version 6.1.162-1.

Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1638-1 phpunit security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4474-1] rlottie security updat

Debian GNU/Linux 12 (Bookworm):
[DSA 6127-1] linux security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6125-1] usbmuxd security update
[DSA 6128-1] shaarli security update

Debian GNU/Linux 13 (Trixie):
[DSA 6126-1] linux security update

Liquorix Linux Kernel 6.18‑10 released

Debian 11106 Ubuntu 7262 Arch Linux 1039 Published by Philipp Esselbach 0

Liquorix Kerne  6.18‑10 has just been released, merging the Linux Kernel 6.18.9 sources and bumping the package version to 6.18.9‑1. The kernel is tuned for extreme responsiveness in interactive desktops, low‑latency A/V production, and reduced frame‑time jitter in games, using features such as Zen Interactive Tuning, a 1000 Hz tick rate, and aggressive preemption. The project supplies Debian packages and Docker‑based build scripts that require Docker and a configured GnuPG key; at present only the AMD64 architecture can be built successfully for Debian, Ubuntu and Arch targets. 

Zabbix and Wireshark updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Two security updates have been released for Debian: Zabbix for Debian GNU/Linux 11 (Bullseye) LTS and Wireshark for Debian GNU/Linux 13 (Trixie). The Zabbix update fixes a vulnerability that allows remote code execution due to an attacker injecting unexpected arguments into the smartctl command, while the Wireshark update addresses multiple vulnerabilities that could result in denial of service or arbitrary code execution. Both updates recommend upgrading the respective packages to fix the security issues.

[DLA 4473-1] zabbix security update
[DSA 6124-1] wireshark security update

XanMod Kernel 6.18.9 and 6.12.69 released

Debian 11106 Ubuntu 7262 Published by Philipp Esselbach 0

The XanMod kernel has released two new versions: 6.18.9 and the long-term 6.12.69, which are now available for Debian/Ubuntu. The XanMod kernel series includes features such as LLVM's ThinLTO and aggressive scheduling, making it suitable for low-latency audio workstations or gaming rigs.

PHPUnit, Sudo, Debian-Security-Support updates for Debian 11 LTS

Debian 11106 Published by Philipp Esselbach 0

Debian has released three security advisories for Debian GNU/Linux 11 (Bullseye) LTS to address vulnerabilities in various packages. The first advisory, DLA-4470-1, fixes a vulnerability in phpunit that could allow remote code execution if malicious .coverage files are present prior to test execution. The second advisory, DLA-4472-1, addresses multiple vulnerabilities in sudo, including issues with escaping control characters in log messages and output. The third advisory, DLA-4471-1, updates debian-security-support to mark the end of security support for certain packages and declare limited security support for others.

[DLA 4470-1] phpunit security update
[DLA 4472-1] sudo security update
[DLA 4471-1] debian-security-support update

OpenJDK, Tomcat, Alsa-Lib, Chromium updates for Debian

Debian 11106 Published by Philipp Esselbach 0

Debian has released several security updates for various packages, including openjdk-25, tomcat9, xrdp, alsa-lib, chromium, and multiple Tomcat versions (10, 11). These updates address vulnerabilities that could lead to code execution, denial of service, or information disclosure. The openjdk-25 update fixes several vulnerabilities that may result in incorrect certificate validation or other attacks, while the tomcat9 update corrects flaws that can lead to a bypass of security constraints or denial of service. Users are advised to upgrade their packages as soon as possible and follow the instructions provided by Debian for applying the updates to their system.

Debian GNU/Linux 10 (Bullseye) Extended LTS:
ELA-1636-1 xrdp security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4468-1] tomcat9 security update
[DLA 4469-1] alsa-lib security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6122-1] chromium security update
[DSA 6120-1] tomcat10 security update

Debian GNU/Linux 13 (Trixie):
[DSA 6119-1] openjdk-25 security update
[DSA 6121-1] tomcat11 security update

Previous Page

Next Page

Windows

Linux

macOS

Community

  • gavindi
    Mt. Sync is a native GNOME desktop application that puts ...
  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...