Chromium, Dovecot, ImageMagick, and more updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian released a batch of security advisories that address critical flaws across several widely used software packages. The updates target chromium, dovecot, imagemagick, the Linux kernel, thunderbird, and a few other libraries that could allow attackers to execute arbitrary code or crash systems through denial of service exploits. Some vulnerabilities stem from improper memory handling and integer overflows while others involve authentication bypasses or unsafe file path traversal that might expose sensitive data. System administrators should apply the recommended package upgrades right away to patch these issues before malicious actors can take advantage of them.

[DSA 6239-1] chromium security update
[DLA 4556-1] dovecot security update
[DSA 6141-1] python-aiohttp security update
[DSA 6240-1] imagemagick security update
[DLA 4558-1] libexif security update
[DLA 4557-1] pyasn1 security update
[DSA 6197-3] dovecot regression update
[DLA 4559-1] imagemagick security update
[DSA 6243-1] linux security update
[DSA 6242-1] thunderbird security update

Liquorix Linux Kernel 6.19-12 released

Debian 10927 Ubuntu 7099 Arch Linux 964 Published by Philipp Esselbach 0

Liquorix Kernel 6.19-12 patches Xen memory corruption bugs and reverts a crypto interface change that was actively breaking cipher operations under load. The official installation script handles package registration automatically on Debian, Ubuntu, and Arch systems, though piping raw downloads to root always demands basic caution since maintainers rarely babysit broken installs. Desktop users will likely enjoy the usual low-latency responsiveness tweaks while gaining better virtualization stability, but older hardware might still throw driver conflicts during boot. Testing the update in a sandbox environment first keeps daily workflows intact while letting the project team squash any lingering regressions before full deployment.

Firefox-ESR, Policykit, Calibre, and more updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Recent Debian and Freexian advisories address critical security flaws across several widely used system packages. The Linux kernel update patches dozens of vulnerabilities that could enable privilege escalation or cause severe service disruptions. Additional fixes target Firefox ESR, Calibre, PolicyKit-1, and systemd by resolving issues like arbitrary code execution, path traversal attacks, and local denial of service conditions. Administrators should apply these updates without delay to maintain a secure computing environment.

Debian GNU/Linux 9 (Stretch) ELTS:
ELA-1702-1 policykit-1 security update
ELA-1701-1 systemd security update

Debian GNU/Linux 10 (Buster) ELTS:
ELA-1700-1 systemd security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4555-1] firefox-esr security update
[DLA 4554-1] calibre security update

Debian GNU/Linux 13 (Trixie):
[DSA 6238-1] linux security update

Policykit-1, OpenJDK, Firefox-ESR updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian system administrators should upgrade policykit-1 on bullseye to fix a file descriptor leak that causes unprivileged processes to crash unexpectedly. The OpenJDK runtime also needs immediate attention since multiple flaws can generate broken cryptographic keys or expose sensitive information through flawed Kerberos validation logic. Firefox ESR users must install the updated browser package to prevent potential sandbox escapes and arbitrary code execution vulnerabilities.

[DLA 4553-1] policykit-1 security update
[DSA 6237-1] openjdk-17
[DSA 6236-1] firefox-esr security update

Webkit2GTK, Node-Tar, Dnsdist, Pdns, FFmpeg updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Recent Debian security advisories highlight critical flaws across several widely used software packages including webkit2gtk, node-tar, and various DNS tools. Attackers could exploit these weaknesses to bypass security restrictions, trigger system crashes, or execute arbitrary code through malicious web content or archives. The fixes are already available for current stable distributions while older releases like Debian 11 receive targeted patches from the long term support team.

Debian GNU/Linux 9 (Stretch) Extended LTS:
ELA-1699-1 ffmpeg security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4552-1] node-tar security update

Debian GNU/Linux 13 (Trixie):
[DSA 6232-1] webkit2gtk security update
[DSA 6235-1] dnsdist security update
[DSA 6234-1] pdns-recursor security update
[DSA 6233-1] pdns security update

XanMod Kernel 7.0.2 and 6.18.25 LTS released

Debian 10927 Ubuntu 7099 Published by Philipp Esselbach 0

XanMod has released kernel versions 7.0.2 and 6.18.25 LTS to deliver faster scheduling, improved memory management, and modern network optimizations for Debian-based systems. The builds ship with LLVM ThinLTO, Google's multigenerational LRU framework, BBRv3 congestion control, and dedicated drivers for AMD V-Cache hardware. Before upgrading, users should verify that their third-party modules like NVIDIA graphics or virtualization software support the new kernel, as DKMS compilation failures are common. Installing requires adding the official GPG key, pointing APT to the custom repository, pulling in build dependencies, and rebooting to activate the performance tweaks.

Mbedtls, Libde265, OpenJDK updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian released multiple security advisories to patch critical vulnerabilities in mbedtls, libde265, and openjdk-21. The mbedtls update resolves a timing discrepancy that could expose cryptographic secrets alongside a flawed random number fallback mechanism. Libde265 receives essential memory safety corrections after developers found stack and heap overflow bugs capable of triggering severe system crashes or unauthorized execution. OpenJDK 21 also gets fixed against numerous authentication flaws and denial of service risks, prompting administrators to upgrade all affected systems right away.

[DLA 4551-1] mbedtls security update
ELA-1698-1 libde265 security update
[DLA 4550-1] libde265 security update
[DSA 6231-1] openjdk-21 security update

Thunderbird and ImageMagick updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian Long Term Support teams have released urgent security patches for both Thunderbird and ImageMagick to address critical flaws in their software suites. Attackers could exploit the Thunderbird vulnerabilities to execute arbitrary code on any affected Debian GNU/Linux 11 (Bullseye) LTS machine. The ImageMagick update tackles a different set of problems entirely, including symlink races, information leaks, and denial of service threats that impact Debian GNU/Linux 9 (Stretch) ELTS environments.

[DLA 4549-1] thunderbird security update
ELA-1696-1 imagemagick security update

Distro-Info-Data and ImageMagick updates for Debian LTS/ELTS

Debian 10927 Published by Philipp Esselbach 0

Debian LTS and ELTS users should install routine database updates for the distro-info-data package, which refreshes end-of-life timelines for Debian GNU/Linux 11 (Bookworm) LTS and introduces Ubuntu 26.10 Stonking Stingray. A separate security patch for imagemagick addresses over fifteen critical flaws that could expose systems to symlink attacks, data leaks, service disruptions, or remote code execution. Both advisories emphasize immediate package upgrades to maintain system stability and protect against known exploits.

[DLA 4548-1] distro-info-data database update
ELA-1697-1 distro-info-data database update
ELA-1696-1 imagemagick security update

Pillow, Chromium, Thunderbird updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian released a security advisory for Chromium that patches several vulnerabilities capable of triggering arbitrary code execution, denial of service attacks, or unauthorized data leaks. A separate update for Thunderbird tackles a long list of flaws that could similarly allow attackers to run malicious code on affected systems. The Python image library Pillow also received two distinct fixes addressing memory exhaustion bugs, infinite loops, and a dangerous file deletion issue caused by mishandled temporary paths.

Debian GNU/Linux 9 (Stretch) Extended LTS:
ELA-1694-1 pillow security update

Debian GNU/Linux 10 (Buster) Extended LTS:
ELA-1695-1 pillow security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6230-1] chromium security update
[DSA 6229-1] thunderbird security update

XanMod Kernel 7.0.1, 6.19.14, and 6.18.24 LTS released

Debian 10927 Ubuntu 7099 Published by Philipp Esselbach 0

The latest XanMod kernel releases pack in memory management tweaks, BBRv3 networking improvements, and hardware optimizations that actually matter for desktop workstations and gaming rigs. Setting it up is straightforward through the official APT repository or standalone packages, though users should expect a short wait for NVIDIA and virtualization drivers to catch up. Power users juggling heavy compilations, streaming setups, or GPU passthrough will notice the performance gains, while casual office workers will barely register the difference. Testing the update in a safe environment first prevents broken display outputs from derailing the work week.

OpenIDC, Inetutils, Packagekit, and more updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian and Freexian issued a set of security updates for numerous Linux packages across multiple distributions. The updates address critical flaws in Firefox ESR, Flatpak, and strongSwan that could let attackers bypass sandbox protections or run malicious code with elevated privileges. Systems running older release branches also received necessary fixes for PackageKit race conditions and network utilities like inetutils that previously allowed information leaks and service disruptions. You should install these updates as soon as possible to prevent potential exploitation of the disclosed vulnerabilities.

Debian GNU/Linux 9 (Stretch) Extended LTS:
ELA-1691-1 libapache2-mod-auth-openidc security update

Debian GNU/Linux 9 (Stretch) and 10 (Buster) Extended LTS:
ELA-1692-1 inetutils security update
ELA-1693-1 packagekit security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4545-1] packagekit security update

Debian GNU/Linux 12 (Bookworm):
[DSA 6224-1] xdg-dbus-proxy security update
[DSA 6223-1] flatpak security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6225-1] firefox-esr security update
[DSA 6226-1] packagekit security update
[DSA 6227-1] strongswan security update

Debian GNU/Linux 13 (Trixie):
[DSA 6228-1] cpp-httplib security update

Liquorix Linux Kernel 6.19-11 released

Debian 10927 Ubuntu 7099 Arch Linux 964 Published by Philipp Esselbach 0

The Liquorix Kernel 6.19 release shifts Linux scheduling and memory management toward instant responsiveness, making it a solid choice for gamers and audio producers chasing lower frame time spikes. Scheduler timeslices shrink to two milliseconds while memory watermarks drop to zero, allowing foreground tasks to grab CPU attention without waiting on background reclamation. Debian and Ubuntu users can swap the default kernel with a single curl script, though keeping the original distro kernel as a fallback remains a smart move. The aggressive tuning profile sacrifices battery life and thermal stability for tighter performance, so testing on a secondary machine before committing to a daily driver is highly recommended.

NTFS 3G, Xdg-Dbus-Proxy, ImageMagick, and more updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Multiple Debian and Freexian Long Term Support advisories were released to address critical security flaws across several widely used software packages. The updates target vulnerabilities in opam, mupdf, xdg-dbus-proxy, ntfs-3g, simpleeval, ngtcp2, python-geopandas, and imagemagick that could allow attackers to bypass restrictions or execute arbitrary code. These issues include heap buffer overflows, directory traversal risks, sandbox escapes, and potential SQL injection flaws that threaten system stability and data privacy.

Debian GNU/Linux 9 (Stretch) and 10 (Buster) ELTS:
ELA-1689-1 ntfs-3g security update

Debian GNU/Linux 10 (Buster) ELTS:
ELA-1688-1 xdg-dbus-proxy security update
ELA-1690-1 imagemagick security update

Debian GNU/Linux 11 (Bullseye) LTS:
[DLA 4541-1] opam security update
[DLA 4540-1] mupdf security update
[DLA 4542-1] xdg-dbus-proxy security update
[DLA 4543-1] simpleeval security update
[DLA 4523-1] python-geopandas security update
[DLA 4544-1] ntfs-3g security update

Debian GNU/Linux 12 (Bookworm) and 13 (Trixie):
[DSA 6221-1] ntfs-3g security update
[DSA 6222-1] ngtcp2 security update

Tiff and Simpleeval updates for Debian

Debian 10927 Published by Philipp Esselbach 0

A recent security bulletin addresses two critical vulnerabilities affecting popular software packages. The first update patches libtiff to resolve a heap overflow flaw that could trigger arbitrary code execution or denial of service when handling corrupted image files. Meanwhile, the second advisory fixes simpleeval, a Python utility that previously allowed attackers to bypass sandbox restrictions due to inadequate module reference controls. System administrators should apply these updated package versions across their Debian environments without delay.

ELA-1687-1 tiff security update
[DSA 6220-1] simpleeval security update

Liquorix Linux Kernel 6.19-10 released

Debian 10927 Ubuntu 7099 Arch Linux 964 Published by Philipp Esselbach 0

The Liquorix Linux Kernel 6.19-10 drops today with a clear mission to shave input lag and smooth out frame pacing for desktop users who run audio software or play games. It achieves this by halving the CPU scheduling timeslice, disabling split lock detection, and tweaking memory management flags that would otherwise stall foreground tasks. Power efficiency takes a backseat in this build since the governor settings keep processors running hotter longer to guarantee snappier desktop response. You can swap it into Debian or Ubuntu systems using their official install script, but keeping your old kernel as a fallback is still smart if you run proprietary drivers.

Pillow and ImageMagick updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Debian security teams recently issued critical updates for both Pillow and ImageMagick to address serious flaws in these widely used image processing libraries. The advisory for Pillow specifically targets a denial of service vulnerability within its FITS support module on the current stable release. Meanwhile, extended maintenance advisories for older Debian versions patched numerous dangerous bugs that could allow attackers to execute arbitrary code or steal sensitive data. System administrators should apply these patches right away to keep their environments secure.

[DSA 6219-1] pillow security update
[DLA 4539-1] imagemagick security update
ELA-1657-1 imagemagick security update

XanMod Kernel 6.18.23 LTS and 6.19.13 released

Debian 10927 Ubuntu 7099 Published by Philipp Esselbach 0

The latest XanMod kernel releases bring targeted desktop performance improvements through optimized scheduling, memory management, and network stacks that reduce stutter during heavy multitasking. Installing them via the official APT repository is straightforward but requires preloading build dependencies to keep third-party modules like NVIDIA drivers or virtualization tools working properly. Users should always check module compatibility before upgrading since proprietary software often lags behind custom kernel updates and can break display or networking functions after a reboot. These builds are ideal for desktop users who want smoother system responsiveness without manually patching the mainline Linux kernel themselves.

Perl, PostgreSQL, Mapserver, Mupdf, Perl updates for Debian

Debian 10927 Published by Philipp Esselbach 0

Recent Debian security advisories address critical vulnerabilities across several widely used software packages. Perl requires an update because thread creation can temporarily shift the current directory, potentially allowing local attackers to access restricted files or inject malicious code. PostgreSQL versions 11 and 9.6 received follow-up patches to fix a regression in multibyte character handling while also incorporating minor upstream improvements. Meanwhile, MapServer and MuPDF both address heap buffer overflow flaws that could otherwise enable remote denial of service attacks or arbitrary code execution through crafted inputs.

ELA-1685-1 perl security update
ELA-1676-2 postgresql-11 regression update
ELA-1677-2 postgresql-9.6 regression update
ELA-1686-1 mapserver security update
[DSA 6218-1] mupdf security update
[DLA 4538-1] perl security update

Previous Page

Next Page

Windows

Linux

macOS

Community

  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...
  • dhamu
    Hello Phil, I have a Linux Tutorial website that curre ...