Debian LTS and ELTS users should install routine database updates for the distro-info-data package, which refreshes end-of-life timelines for Debian GNU/Linux 11 (Bookworm) LTS and introduces Ubuntu 26.10 Stonking Stingray. A separate security patch for imagemagick addresses over fifteen critical flaws that could expose systems to symlink attacks, data leaks, service disruptions, or remote code execution. Both advisories emphasize immediate package upgrades to maintain system stability and protect against known exploits.

[DLA 4548-1] distro-info-data database update
ELA-1697-1 distro-info-data database update
ELA-1696-1 imagemagick security update

[SECURITY] [DLA 4548-1] distro-info-data database update

-------------------------------------------------------------------------
Debian LTS Advisory DLA-4548-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Stefano Rivera
April 25, 2026 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package : distro-info-data
Version : 0.51+deb11u11

This is a routine update of the distro-info-data database for Debian LTS
users.

It updates the EoL date for bookworm and adds Ubuntu 26.10 "Stonking Stingray".

For Debian 11 bullseye, this problem has been fixed in version
0.51+deb11u11.

We recommend that you upgrade your distro-info-data packages.

For the detailed security status of distro-info-data please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/distro-info-data

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

ELA-1697-1 distro-info-data database update (by )

Package : distro-info-data

Version : 0.41+deb10u2~bpo9+10 (stretch), 0.41+deb10u14 (buster)

This is a routine update of the distro-info-data database for Debian
ELTS users.
It updates the EoL date for bookworm and adds Ubuntu 26.10 “Stonking
Stingray”.

ELA-1697-1 distro-info-data database update (by )

ELA-1696-1 imagemagick security update (by )

Package : imagemagick

Version : 8:6.9.7.4+dfsg-11+deb9u27 (stretch)

Related CVEs :
CVE-2026-25985
CVE-2026-26284
CVE-2026-26983
CVE-2026-28494
CVE-2026-28686
CVE-2026-28689
CVE-2026-28690
CVE-2026-28691
CVE-2026-28692
CVE-2026-28693
CVE-2026-30883
CVE-2026-30936
CVE-2026-30937
CVE-2026-31853
CVE-2026-32259
CVE-2026-32636
CVE-2026-33535
CVE-2026-33536

Multiple security vulnerabilities were discovered in imagemagick,
a software suite used for editing and manipulating digital images, which
could lead to symlink races, information leaks, denial of service
and potentially arbitrary code execution.

ELA-1696-1 imagemagick security update (by )