--- title: Debian -- News -- Updated Debian 13: 13.6 released description: Debian 13.6 point release has been issued, delivering security fixes and bug corrections across a wide range of packages. Notable updates include multiple CVE... canonical: https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Debian -- News -- Updated Debian 13: 13.6 released | daily.dev og:description: Debian 13.6 point release has been issued, delivering security fixes and bug corrections across a wide range of packages. Notable updates include multiple CVE... og:url: https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0 og:image: https://api.daily.dev/og/posts/P0Hbj7Zk0.png og:image:alt: Debian -- News -- Updated Debian 13: 13.6 released og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Debian -- News -- Updated Debian 13: 13.6 released **[Debian](https://daily.dev/sources/debian)** · 7 min read · 0 upvotes · 0 comments ## Summary Debian 13.6 point release has been issued, delivering security fixes and bug corrections across a wide range of packages. Notable updates include multiple CVE patches for apache2, curl, python3.13, qemu, libxml2, and dozens of other packages. Fixes address use-after-free vulnerabilities, buffer overflows, denial of service issues, XSS flaws, sandbox escapes, and credential leaks. The release also updates shim for Secure Boot compatibility with the 2026 certificate transition, bumps the Linux ABI to 6.12.94, and includes new upstream stable releases for samba, postfix, wireshark, and qemu. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does the Debian 13.6 point release update? Debian 13.6 is a point release for Debian 13 (Trixie) that bundles security and bug fixes accumulated since the previous release. It updates packages including apache2, curl, libxml2, qemu, python3.13, samba, postfix, wireshark, and shim, fixing hundreds of CVEs and includes new upstream stable releases for several packages plus UEFI Secure Boot certificate handling updates. _Teams tracking Debian security updates can follow point release changes like this on daily.dev._ ### Does Debian 13.6 fix any curl vulnerabilities? Yes, Debian 13.6 patches multiple curl CVEs including bearer token redirect leaks (CVE-2025-14524, CVE-2026-3783), OpenSSL CA cache reuse issues (CVE-2025-14819), HTTP Negotiate and proxy connection reuse flaws (CVE-2026-1965, CVE-2026-3784, CVE-2026-5545), SMB use-after-free bugs, and stale cookie and credential leak issues across redirected hosts and proxies. _Developers auditing curl-dependent systems can keep tabs on CVE patches through daily.dev._ ### What changed for qemu and samba in Debian 13.6? Both qemu and samba received new upstream stable releases in Debian 13.6. Qemu's update also bundles a large batch of security fixes covering more than 20 CVEs, including CVE-2026-3195, CVE-2026-3196, and CVE-2026-8341, addressing various virtualization-related vulnerabilities alongside general stability improvements from the new upstream version. _Infrastructure engineers relying on qemu or samba can track upstream release changes via daily.dev._ ## Similar posts on daily.dev - [Debian 13.5 Released To Ship The Latest Linux Security Fixes](https://daily.dev/posts/debian-13-5-released-to-ship-the-latest-linux-security-fixes-tuqci8skl) · Phoronix · 0 upvotes · 0 comments - [Debian 13.6 Released To Ship All The Latest Security Fixes, Reverts GeoIP Database](https://daily.dev/posts/debian-13-6-released-to-ship-all-the-latest-security-fixes-reverts-geoip-database-naophcfqn) · Phoronix · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Debian -- News -- Updated Debian 13: 13.6 released","url":"https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0"},"datePublished":"2026-07-11T11:49:26.565Z","dateModified":"2026-09-13T18:26:20.352Z","description":"Debian 13.6 point release has been issued, delivering security fixes and bug corrections across a wide range of packages. Notable updates include multiple CVE...","image":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","thumbnailUrl":"https://media.daily.dev/image/upload/s--HRgLpUt6--/f_auto/v1722860399/public/Placeholder%2003","isAccessibleForFree":true,"articleSection":"Debian","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Debian","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/fb306f654a8842b4aa74363a90a15f85","url":"https://daily.dev/sources/debian"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,open-source,linux","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Debian","item":"https://daily.dev/sources/debian"},{"@type":"ListItem","position":3,"name":"Debian -- News -- Updated Debian 13: 13.6 released"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/debian----news----updated-debian-13-13-6-released-p0hbj7zk0#faq","mainEntity":[{"@type":"Question","name":"What does the Debian 13.6 point release update?","acceptedAnswer":{"@type":"Answer","text":"Debian 13.6 is a point release for Debian 13 (Trixie) that bundles security and bug fixes accumulated since the previous release. It updates packages including apache2, curl, libxml2, qemu, python3.13, samba, postfix, wireshark, and shim, fixing hundreds of CVEs and includes new upstream stable releases for several packages plus UEFI Secure Boot certificate handling updates. Teams tracking Debian security updates can follow point release changes like this on daily.dev."}},{"@type":"Question","name":"Does Debian 13.6 fix any curl vulnerabilities?","acceptedAnswer":{"@type":"Answer","text":"Yes, Debian 13.6 patches multiple curl CVEs including bearer token redirect leaks (CVE-2025-14524, CVE-2026-3783), OpenSSL CA cache reuse issues (CVE-2025-14819), HTTP Negotiate and proxy connection reuse flaws (CVE-2026-1965, CVE-2026-3784, CVE-2026-5545), SMB use-after-free bugs, and stale cookie and credential leak issues across redirected hosts and proxies. Developers auditing curl-dependent systems can keep tabs on CVE patches through daily.dev."}},{"@type":"Question","name":"What changed for qemu and samba in Debian 13.6?","acceptedAnswer":{"@type":"Answer","text":"Both qemu and samba received new upstream stable releases in Debian 13.6. Qemu's update also bundles a large batch of security fixes covering more than 20 CVEs, including CVE-2026-3195, CVE-2026-3196, and CVE-2026-8341, addressing various virtualization-related vulnerabilities alongside general stability improvements from the new upstream version. Infrastructure engineers relying on qemu or samba can track upstream release changes via daily.dev."}}]} ```