Liquorix Kernel 7.0.15 is live, built on the Linux 7.0.13 base to deliver targeted latency improvements and a critical hard freeze fix. The release abandons the mq-deadline block scheduler in favor of kyber and bfq, while cutting CPU timeslices down to 2ms for tighter interactivity. Liquorix also disables split-lock detection and adjusts virtual memory watermarks to smooth out latency spikes during demanding workloads. You can grab the updated kernel immediately using their automated curl installer, which pushes fresh binaries to Debian, Ubuntu, and Archl Linux within hours of the release.
As of right now, Debian maintains a steady stream of emergency patches, and this latest batch tackles roughly six distinct vulnerabilities across major Linux packages. Longtime system watchers notice a familiar pattern of technical debt piling up across database tools, yet administrators must return to prioritizing this specific upgrade before the next wave of exploits surfaces. Roughly equivalent trouble waits in cloud-init, where broken repository links stop machines from grabbing security updates, while yelp, libhttp-daemon-perl, and libmatio open doors for sandbox escapes, arbitrary command execution, and remote code execution.
[DLA 4644-1] libmatio security update
ELA-1755-1 libhttp-daemon-perl security update (by )
[DLA 4645-1] cloud-init - correct sources.list generation
[DLA 4646-1] postgresql-13 security update
[DLA 4647-1] yelp security update
[DLA 4644-1] libmatio security update
ELA-1755-1 libhttp-daemon-perl security update (by )
[DLA 4645-1] cloud-init - correct sources.list generation
[DLA 4646-1] postgresql-13 security update
[DLA 4647-1] yelp security update
Debian shipped critical updates for gst-plugins-bad1.0, python-urllib3, ImageMagick, u-boot, and beets across trixie, bullseye, and bookworm. The gst-plugins patch squashes three CVEs including CVE-2026-52718 and CVE-2026-53701 that let corrupted media trigger crashes, while the urllib3 update plugs that cross-origin redirect leak that’s arguably slipped past developers for months.
[DSA 6362-1] gst-plugins-bad1.0 security update
[DSA 6363-1] python-urllib3 security update
[DLA 4643-1] imagemagick security update
[DLA 4642-1] u-boot security update
[DLA 4641-1] beets security update
[DSA 6362-1] gst-plugins-bad1.0 security update
[DSA 6363-1] python-urllib3 security update
[DLA 4643-1] imagemagick security update
[DLA 4642-1] u-boot security update
[DLA 4641-1] beets security update
Debian has published an urgent security advisory for the ffmpeg multimedia toolkit to address several dangerous vulnerabilities linked to CVE-2025-22921, CVE-2026-8461, and CVE-2026-30997. Malformed media inputs could trigger system crashes or allow remote attackers to run arbitrary code on vulnerable machines. The trixie stable release now ships the corrected version 7:7.1.5-0+deb13u1 to completely mitigate these risks.
[SECURITY] [DSA 6361-1] ffmpeg security update
[SECURITY] [DSA 6361-1] ffmpeg security update
Debian published a series of security advisories that patches dozens of critical flaws across core system components and popular software packages. The Linux kernel update resolves a massive list of common vulnerability identifiers that could allow attackers to escalate privileges or crash services. Popular media and web frameworks like ImageMagick, Pillow, and Squid now ship corrected versions that block malicious input from triggering arbitrary code execution.
[DSA 6355-1] linux security update
[DLA 4638-1] libgd-perl security update
[DSA 6356-1] imagemagick security update
[DSA 6359-1] gst-plugins-good1.0 security update
[DSA 6358-1] libhttp-daemon-perl security update
[DSA 6357-1] pillow security update
[DSA 6360-1] squid security update
[DLA 4639-1] libhttp-daemon-perl security update
[DLA 4640-1] mediawiki security update
[DSA 6355-1] linux security update
[DLA 4638-1] libgd-perl security update
[DSA 6356-1] imagemagick security update
[DSA 6359-1] gst-plugins-good1.0 security update
[DSA 6358-1] libhttp-daemon-perl security update
[DSA 6357-1] pillow security update
[DSA 6360-1] squid security update
[DLA 4639-1] libhttp-daemon-perl security update
[DLA 4640-1] mediawiki security update
The Liquorix kernel 7.0-14 update tightens the scheduler and wakelist logic to deliver more consistent frame times for gaming and audio workloads. By reintroducing PSI support for Project-C and refining CPU masking routines, the release targets the exact paths that cause context switch stutter on interactive desktops. Users can deploy the changes quickly through the official one-line installer script, which safely handles repository setup and leaves the previous kernel as a fallback. Testing the new build on live audio sessions or benchmark runs will quickly reveal whether the scheduler tweaks match specific hardware quirks.
Debian administrators should immediately apply critical security patches for Thunderbird, Firefox ESR, libconfig-inifiles-perl, and gst-libav1.0 to address numerous high-risk vulnerabilities. These updates resolve dozens of common vulnerability identifiers that could allow attackers to execute arbitrary code or bypass browser security restrictions. The fixes also target a Perl module flaw capable of triggering shell command execution alongside heap memory corruption issues within the GStreamer multimedia framework.
[DLA 4636-1] thunderbird security update
[DLA 4635-1] firefox-esr security update
[DLA 4637-1] libconfig-inifiles-perl security update
[DSA 6354-1] libconfig-inifiles-perl security update
[DSA 6353-1] gst-libav1.0 security update
[DLA 4636-1] thunderbird security update
[DLA 4635-1] firefox-esr security update
[DLA 4637-1] libconfig-inifiles-perl security update
[DSA 6354-1] libconfig-inifiles-perl security update
[DSA 6353-1] gst-libav1.0 security update
XanMod just pushed out kernels 6.18.36 LTS, 7.0.13, and 7.1.1 for Debian and Ubuntu, packing in LLVM ThinLTO optimizations and default BBRv3 network handling. The update also adds targeted hardware patches like AMD 3D V-Cache support and Steam Deck sensor drivers to improve real-world responsiveness. Anyone running NVIDIA graphics, OpenZFS, or VMware should verify dkms compatibility first, since proprietary modules frequently break during rapid kernel shifts. Official repositories make the upgrade straightforward, and the GPLv2 license keeps the entire build process fully transparent for tinkerers.
Debian has rolled out urgent security patches for Thunderbird and Chromium to address dozens of critical flaws that could let attackers run malicious code or leak private data. These updates tackle a long list of common vulnerability identifiers by hardening the email client and browser engine across both current and legacy stable distributions. System administrators will also notice quiet maintenance releases for Linux kernels 5.10 and 6.1 that simply correct broken package metadata caused by recent server hiccups. You should install these fixes right away to keep your Debian machines protected against active threats and repository errors.
[DSA 6351-1] thunderbird security update
ELA-1738-2 linux-5.10 regression update
ELA-1739-2 linux-6.1 regression update
[DSA 6351-1] chromium security update
[DSA 6351-1] thunderbird security update
ELA-1738-2 linux-5.10 regression update
ELA-1739-2 linux-6.1 regression update
[DSA 6351-1] chromium security update
Debian administrators should immediately apply a fresh batch of security patches released to protect their systems from multiple critical flaws across popular open source applications. LibreOffice and Nginx received urgent fixes for memory corruption and remote execution vulnerabilities that could allow attackers to crash software or take full control of affected machines through malicious files or network requests. Firefox ESR faces numerous sandbox escape and privilege escalation risks while Atril contains a dangerous command injection bug triggered by specially crafted PDF documents.
[DLA 4633-1] libreoffice security update
[DLA 4634-1] nginx security update
[DSA 6350-1] firefox-esr security update
[DSA 6349-1] atril security update
[DLA 4633-1] libreoffice security update
[DLA 4634-1] nginx security update
[DSA 6350-1] firefox-esr security update
[DSA 6349-1] atril security update
Debian administrators received three urgent security advisories that target serious vulnerabilities in gsasl, Asterisk, and Atril. The GNU SASL library needs a quick patch since its NTLM client lacks proper input sanitizing, which could expose sensitive memory contents to malicious users. Asterisk also demands immediate attention because developers fixed twelve separate issues involving heap overflows, stack underflows, and flawed certificate validation processes. Users running Debian GNU/Linux 11 (Bullseye) LTS or 12 (Bookworm) must upgrade their packages immediately to close these dangerous gaps before attackers can exploit them.
[DSA 6348-1] gsasl security update
[DLA 4631-1] asterisk security update
[DLA 4632-1] atril security update
[DSA 6348-1] gsasl security update
[DLA 4631-1] asterisk security update
[DLA 4632-1] atril security update
Debian administrators need to apply a fresh security patch that tackles multiple critical flaws across the bird2 routing daemon, LibreOffice suite, and libgd-perl module right now. Attackers could exploit these weaknesses to crash systems through denial of service attacks or run arbitrary code by opening malicious documents. The stable Debian GNU/Linux 13 (Trixie) distribution already receives updated package versions designed to completely remove these dangerous vulnerabilities from your network. You should upgrade every affected system immediately before threat actors can take advantage of the unpatched software.
[DSA 6347-1] bird2 security update
[DSA 6346-1] libreoffice security update
[DSA 6345-1] libgd-perl security update
[DSA 6347-1] bird2 security update
[DSA 6346-1] libreoffice security update
[DSA 6345-1] libgd-perl security update
Debian Long Term Support recently issued urgent security patches for Apache2 version 2.4.59 and OpenSSL version 1.1.1w to resolve a wave of critical flaws. The Apache update addresses twelve separate CVEs that could enable remote code execution or information leaks through privilege escalation attacks. System administrators will also want to review the OpenSSL advisory which details five distinct issues including heap buffer overflows and dangerous memory handling errors.
ELA-1754-1 apache2 security update (by )
[DLA 4630-1] openssl security update
ELA-1754-1 apache2 security update (by )
[DLA 4630-1] openssl security update
Debian has issued a critical security advisory for Chromium that patches 29 distinct vulnerabilities ranging from CVE-2026-12007 through CVE-2026-12035. These flaws could potentially let attackers execute arbitrary code on your machine or trigger denial of service attacks while exposing private information. Upgrade immediately to version 149.0.7827.114 on Debian GNU/Linux 12 (Bookworm) or Debian GNU/Linux 13 (Trixie) systems.
[DSA 6344-1] chromium security update
[DSA 6344-1] chromium security update
A fresh wave of Debian security advisories dropped and demands immediate attention from system operators who want to keep their networks safe. Critical vulnerabilities in apache2 librabbitmq and jpeg xl could allow malicious users to execute arbitrary code or trigger severe service crashes if left unpatched. The release also includes necessary updates for linux base and kernel wedge so they can properly support the upcoming Linux 6.12 backport on Debian 12 systems. Administrators should verify their current package versions right away since delayed upgrades leave infrastructure wide open to exploitation.
[DLA 4628-1] linux-base update
[DLA 4627-1] kernel-wedge update
[DLA 4629-1] apache2 security update
[DSA 6343-1] librabbitmq security update
{DSA 6342-1] jpeg-xl security update
[DLA 4628-1] linux-base update
[DLA 4627-1] kernel-wedge update
[DLA 4629-1] apache2 security update
[DSA 6343-1] librabbitmq security update
{DSA 6342-1] jpeg-xl security update
Debian system administrators need to apply urgent security patches that address serious flaws across several widely used libraries and cloud infrastructure tools. The libinput driver requires an immediate upgrade because flawed device property handling could allow attackers to gain unauthorized root access on affected machines. Meanwhile, OpenStack deployments face multiple risks including data exposure and network rule bypasses until ironic and neutron receive their respective version updates. Developers relying on XML processing frameworks must also install fresh releases to stop recursive parsing errors from crashing applications or leaking sensitive memory information.
[DSA 6339-1] libinput security update
[DSA 6338-1] libdbi-perl security update
[DLA 4626-1] libinput security update
[DSA 6341-1] ironic security update
[DSA 6340-1] neutron security update
ELA-1753-1 libxml2 security update (by )
[DSA 6339-1] libinput security update
[DSA 6338-1] libdbi-perl security update
[DLA 4626-1] libinput security update
[DSA 6341-1] ironic security update
[DSA 6340-1] neutron security update
ELA-1753-1 libxml2 security update (by )
Debian released a batch of security advisories to patch critical flaws across four widely used packages. The dnsmasq update addresses multiple heap overflow and DNSSEC validation bugs that could allow attackers to inject false cache entries or trigger denial of service attacks. strongSwan patches a double free flaw that could crash the daemon. Chromium and Jackson-core also need urgent updates to stop arbitrary code execution and crash attacks, so system owners must deploy these patches immediately.
[DLA 4625-1] dnsmasq security update
[DSA 6330-1] strongswan security update
[DSA 6337-1] chromium security update
[DSA 6336-1] jackson-core security update
[DLA 4625-1] dnsmasq security update
[DSA 6330-1] strongswan security update
[DSA 6337-1] chromium security update
[DSA 6336-1] jackson-core security update
Steven Barrett pushes Liquorix Linux Kernel 7.0-13 based on Kernel 7.0.12 to squash memory leaks, fix Thunderbolt property parsing race conditions, and clean up AMD and Intel graphics drivers. The update routes out of memory failures through proper cleanup paths and adds a hard recursion limit to prevent crafted peer devices from collapsing the kernel stack. Desktop users running external monitors or heavy GPU workloads will notice fewer random freezes and cleaner frame timing across interactive applications.
Debian issued a series of security advisories to address serious flaws in several key software packages. The OpenSSL updates tackle numerous vulnerabilities that could lead to denial of service or remote code execution, while Poppler receives patches to prevent data leaks and application crashes. Meanwhile, the Mistral workflow engine gets fixed for broken access controls, and Okular addresses a critical issue that could allow arbitrary code execution when opening damaged fax files.
[DLA 4624-1] openssl security update
[DSA 6335-1] openssl security update
[DSA 6334-1] poppler security update
[DSA 6333-1] mistral security update
[DSA 6332-1] okular security update
[DLA 4624-1] openssl security update
[DSA 6335-1] openssl security update
[DSA 6334-1] poppler security update
[DSA 6333-1] mistral security update
[DSA 6332-1] okular security update
The XanMod Kernel 6.18.35 LTS and 7.0.12 drop into Debian-based systems with a heavy focus on fixing memory leaks in USB and Bluetooth drivers while tightening networking stack bounds checking. Official repositories make the five-minute installation straightforward, though users must register the GPG key and add the correct distribution codename before running the package manager. Systems relying on external kernel modules need the dkms and build dependency packages installed first to prevent driver compilation failures after the reboot. Verifying hardware detection and proprietary graphics modules on the first boot prevents silent failures, and the automated repository updates keep the optimized scheduler and memory tweaks current without manual intervention.
