Debian 13.6 point release has been issued, delivering security fixes and bug corrections across a wide range of packages. Notable updates include multiple CVE patches for apache2, curl, python3.13, qemu, libxml2, and dozens of other packages. Fixes address use-after-free vulnerabilities, buffer overflows, denial of service issues, XSS flaws, sandbox escapes, and credential leaks. The release also updates shim for Secure Boot compatibility with the 2026 certificate transition, bumps the Linux ABI to 6.12.94, and includes new upstream stable releases for samba, postfix, wireshark, and qemu.
Table of contents
Noteworthy updatesMiscellaneous BugfixesSecurity UpdatesDebian InstallerURLsAbout DebianContact Information380 Impressions