https://security-tracker.debian.org/tracker/DSA-6201-1
Threat actors are using AI to supercharge tried-and-tested TTPs. When attacks move this fast, cyber-defenders need to rethink their own strategy.
Important: fontforge security update
Important: fontforge security update
Moderate: kernel security update
Moderate: crun security update
Moderate: kernel security update
Moderate: crun security update
https://security-tracker.debian.org/tracker/DSA-6202-1
https://security-tracker.debian.org/tracker/DSA-6197-2
33.0.1 release
Update to 9.6.0. Fixes rhbz#2452087
Moderate: kernel-rt security update
Moderate: kernel-rt security update
Important: python3.12 security update
Moderate: 389-ds:1.4 security update
An update that solves six vulnerabilities can now be installed.
An update that solves eight vulnerabilities can now be installed.
An update that solves five vulnerabilities can now be installed.
An update that solves three vulnerabilities and has two security fixes can now be installed.
An update that solves eight vulnerabilities can now be installed.
Several security issues were fixed in SPIP.
https://security-tracker.debian.org/tracker/DSA-6196-1
Update to 1.94.1
Backport fixes for multiple CVEs.
Update to gstreamer-1.26.11.
Update to gstreamer-1.26.11.
Update to gstreamer-1.26.11.
Update to gstreamer-1.26.11.
https://security-tracker.debian.org/tracker/DSA-6200-1
https://security-tracker.debian.org/tracker/DSA-6199-1
https://security-tracker.debian.org/tracker/DSA-6198-1
https://security-tracker.debian.org/tracker/DSA-6197-1
https://security-tracker.debian.org/tracker/DSA-6195-1
It was discovered that libxml-parser-perl, a Perl module for parsing XML files, was prone to an off-by-one heap buffer overflow in `st_serial_stack()`. This update also includes a follow-up improvement change for CVE-2006-10002 (buffer overwrite in `parse_stream()`.) For Debian 11 bullseye, these problems have been fixed in version
Security fix for CVE-2026-4519
The update fixes CVS-2026-25061
GSSAPI server: Boundary check gss_wrap token (read OOB)
Security fix for CVE-2026-4519.
Security fix for CVE-2026-4519.
https://security-tracker.debian.org/tracker/DSA-6192-1
It was discovered that pyasn1, a generic ASN.1 library for Python, is prone to a denial of service vulnerability when decoding ASN.1 data with deeply nested structures. For the oldstable distribution (bookworm), this problem has been fixed in version 0.4.8-3+deb12u2.
Several vulnerabilities were discovered in the inetutils implementation of telnetd and telnet, which may result in privilege escalation or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 2:2.4-2+deb12u3.
Update to upstream 2.5.2, including fixes for CVE-2026-33757 and CVE-2026-33758
Update to 9.21.20 (rhbz#2440560) Security Fixes: Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. (CVE-2026-1519) Fix memory leaks in code preparing DNSSEC proofs of non-existence.
