[SECURITY] [DLA 4524-2] postgresql-13 regression update

Debian LTS Advisory DLA-4524-2 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof April 17, 2026 https://wiki.debian.org/LTS Package : postgresql-13 Version : 13.23-0+deb11u3 The fix for CVE-2026-2006 introduced a regression in SUBSTRING for toasted multibyte...

[SECURITY] [DSA 6214-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6214-1 [email protected] https://www.debian.org/security/ Andres Salomon April 17, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4535-1] openssh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4535-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 16, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4534-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4534-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 16, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6213-1] lxd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6213-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6212-1] incus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6212-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4532-1] python3.9 regression and security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4532-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout April 15, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4533-1] systemd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4533-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout April 15, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6211-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6211-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 14, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6210-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6210-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 14, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4531-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4531-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 14, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6209-1] xdg-dbus-proxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6209-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 13, 2026 https://www.debian.org/security/faq -...

[BSA-131] Security Update for flatpak

Simon McVittie uploaded new packages for flatpak which fixed the following security problems, the same as in DSA 6207-1: CVE-2026-34078, which allowed a Flatpak app to break out of the sandbox, resulting in code execution in the host context CVE-2026-34079, which allowed a Flatpak app to delete...

[SECURITY] [DLA 4530-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4530-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 13, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4529-1] bind9 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4529-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès April 13, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6208-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6208-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 12, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6207-1] flatpak security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6207-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 12, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6206-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6206-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 11, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4528-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4528-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 11, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4527-1] inetutils security update

Debian LTS Advisory DLA-4527-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson April 11, 2026 https://wiki.debian.org/LTS Package : inetutils Version : 2:2.0-1+deb11u4 CVE ID : CVE-2026-28372 CVE-2026-32746 CVE-2026-32772 Debian Bug : 1130741 1130742 Several...

[SECURITY] [DLA 4526-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4526-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 11, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 6205-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6205-1 [email protected] https://www.debian.org/security/ Andres Salomon April 10, 2026 https://www.debian.org/security/faq -...

[BSA-130] Security Update for openssh

CVE-2026-3497 DSA-6204-1 Jeremy Brown discovered a flaw in the GSSAPI Key Exchange patch applied in Debian to OpenSSH, an implementation of the SSH protocol suite, affecting non-default configurations with the GSSAPIKeyExchange setting enabled. A remote attacker can take advantage of this flaw to...

[SECURITY] [DSA 6204-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6204-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 09, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4525-1] libyaml-syck-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4525-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura April 09, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4524-1] postgresql-13 security update

Debian LTS Advisory DLA-4524-1 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof April 08, 2026 https://wiki.debian.org/LTS Package : postgresql-13 Version : 13.23-0+deb11u2 CVE ID : CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 Debian Bug : Multiple...

[SECURITY] [DSA 6303-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6203-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 08, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6202-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6202-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 08, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6201-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6201-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 07, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6197-2] dovecot regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6197-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 06, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6200-1] tor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6200-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 05, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6199-1] trafficserver security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6199-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 05, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6198-1] valkey security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6198-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 05, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6197-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6197-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 05, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6196-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6196-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4522-1] libxml-parser-perl security update

Debian LTS Advisory DLA-4522-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin April 04, 2026 https://wiki.debian.org/LTS Package : libxml-parser-perl Version : 2.46-2+deb11u1 CVE ID : CVE-2006-10003 Debian Bug : 378412 It was discovered that libxml-parser-perl, a...

[SECURITY] [DSA 6195-1] python-tornado security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6195-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 03, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6194-1] pyasn1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6194-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 03, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6193-1] inetutils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6193-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 03, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6192-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6192-1 [email protected] https://www.debian.org/security/ Andres Salomon April 02, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4521-1] libpng1.6 security update

Debian LTS Advisory DLA-4521-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 02, 2026 https://wiki.debian.org/LTS Package : libpng1.6 Version : 1.6.37-3+deb11u3 CVE ID : CVE-2026-33416 CVE-2026-33636 Debian Bug : 1132012 1132013 Two security vulnerabilities...

[SECURITY] [DSA 6191-1] gst-plugins-ugly1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6191-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6190-1] gst-plugins-bad1.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6190-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 01, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4520-1] python-tornado security update

Debian LTS Advisory DLA-4520-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert April 01, 2026 https://wiki.debian.org/LTS Package : python-tornado Version : 6.1.0-1+deb11u4 CVE ID : CVE-2026-31958 Debian Bug : 1130507 1132367 Tornado is a scalable, non-blocking...

[SECURITY] [DSA 6189-1] libpng1.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6189-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 31, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DSA 6188-1] lxd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6188-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 31, 2026 https://www.debian.org/security/faq -...

[SECURITY] [DLA 4519-1] netty security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4519-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès March 31, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4518-1] phpseclib security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4518-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta March 30, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4517-1] roundcube security update

Debian LTS Advisory DLA-4517-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 30, 2026 https://wiki.debian.org/LTS Package : roundcube Version : 1.4.15+dfsg.1-1+deb11u8 CVE ID : not yet available Debian Bug : 1131182 1132268 Multiple vulnerabilities were...

[BSA-129] Security Update for incus

Mathias Gibbens uploaded new packages for incus which fixed the following security problems: CVE ID : CVE-2026-28384 CVE-2026-33542 CVE-2026-33743 CVE-2026-33897 Multiple security issues were discovered in Incus, a system container and virtual machine manager, which could result in denial of...