Debian and FreeXian released security patches, addressing critical flaws across multiple packages. The chromium advisory fixes twenty-five CVEs that allowed attackers to execute arbitrary code, cause denial of service, or steal sensitive data. Administrators must also update tomcat9 to version 9.0.118-0+deb10u1 and upgrade libtcnative-1 to resolve fifteen security issues involving authentication bypass and information disclosure.

[DLA 4676-1] wireless-regdb new upstream version
[DSA 6387-1] chromium security update
ELA-1771-1 tomcat9 security update

[SECURITY] [DLA 4676-1] wireless-regdb new upstream version

-------------------------------------------------------------------------
Debian LTS Advisory DLA-4676-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Ben Hutchings
July 11, 2026 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package : wireless-regdb
Version : 2026.05.30-1~deb11u1 2026.05.30-1~deb12u1

This update includes the changes in wireless-regdb 2026.05.30,
reflecting changes to radio regulations in several countries.

For Debian 11 bullseye, this update is available as version
2026.05.30-1~deb11u1.

For Debian 12 bookworm, this update is available as version
2026.05.30-1~deb12u1 and included in point release 12.15.

We recommend that you upgrade your wireless-regdb packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

[SECURITY] [DSA 6387-1] chromium security update

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6387-1 security@debian.org
https://www.debian.org/security/ Andres Salomon
July 11, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : chromium
CVE ID : CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110
CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114
CVE-2026-15115 CVE-2026-15116 CVE-2026-15117 CVE-2026-15118
CVE-2026-15119 CVE-2026-15120 CVE-2026-15121 CVE-2026-15122
CVE-2026-15123 CVE-2026-15124 CVE-2026-15125 CVE-2026-15126
CVE-2026-15127 CVE-2026-15128 CVE-2026-15129 CVE-2026-15130
CVE-2026-15131 CVE-2026-15132 CVE-2026-15133

Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.

For the stable distribution (trixie), these problems have been fixed in
version 150.0.7871.114-1~deb13u1.

We recommend that you upgrade your chromium packages.

For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

ELA-1771-1 tomcat9 security update (by )

Package : tomcat9


Version : 9.0.118-0+deb10u1 (buster)

Related CVEs :
CVE-2026-24880
CVE-2026-25854
CVE-2026-29129
CVE-2026-29145
CVE-2026-29146
CVE-2026-32990
CVE-2026-34483
CVE-2026-34487
CVE-2026-34500
CVE-2026-41284
CVE-2026-41293
CVE-2026-42498
CVE-2026-43512
CVE-2026-43513
CVE-2026-43514
CVE-2026-43515

Multiple security vulnerabilities have been discovered in Tomcat 9, a Java
based web server, servlet and JSP engine which may result in a denial of
service, authentication bypass or the disclosure of sensitive information.
In order to address certain vulnerabilities and restore the compatibility with
Tomcat 9, an upgrade of the Tomcat native library, libtcnative-1, was required
as well.
Although we are not aware of any problems, new upstream versions may introduce
new options, limits or code changes which may or may not affect your existing
web applications. We recommend to consult the Tomcat 9 documentation for
further information.

ELA-1771-1 tomcat9 security update (by )