Loading story…
Debian has released Debian 13.6 as a point update focused on security and maintenance, alongside Debian 12.15 for the previous stable branch. Debian 13.6 bundles roughly 120 security updates and more than 120 bug fixes, with patches affecting the Linux kernel and widely deployed packages including Nginx, Redis, FFmpeg, Thunderbird, Chromium, PHP, Postfix, Samba, wireless-regdb, and Wireshark. The update is intended to bring existing installations current rather than introduce a new major version.
A notable change in Debian 13.6 is an updated shim-signed and fwupd 2.0.20 stack to support newer Microsoft UEFI Secure Boot certificate chains and updates to Secure Boot CA, KEK, and DBX databases after expiration issues with the default UEFI Secure Boot CA used on many PCs. Debian also reverted or removed the legacy geoip-database package because newer GeoLite data was found incompatible with Debian Free Software Guidelines and the older dataset had become outdated, pushing migration toward maintained alternatives such as GeoLite2.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
Debian announced on July 11, 2026 that Debian 12.15 is the fifteenth and final point release of Debian 12 "bookworm" oldstable. The announcement also said standard Debian Release Team, Security Team, and Backports support for Debian 12 had ended, with limited ongoing support moving to Debian LTS for some architectures.
Debian 13.6 includes shim-signed and fwupd 2.0.20 updates to support newer Microsoft UEFI Secure Boot certificate infrastructure and updating Secure Boot CA, KEK, and DBX databases. The change addresses the expiration of the default UEFI Secure Boot CA used on most PCs.
The Debian 13.6 release reverted the geoip-database package to a December 2019 state because newer GeoLite versions were found incompatible with the Debian Free Software Guidelines. Other reporting describes the package as outdated and being removed or replaced due to licensing and maintenance issues.
Debian 13.6 was released as a new point release for Debian Trixie, bundling the latest security fixes and maintenance updates. The release includes numerous package updates and security advisories affecting components such as the Linux kernel, Nginx, Redis, FFmpeg, Thunderbird, Chromium, and PHP.
Reporting on the Debian 13.6 release also states that Debian 12.15 was released in parallel as an updated point release focused on security fixes and important bug corrections. The Debian 12 release is described as continuing under LTS-related support arrangements.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
10 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcehelpnetsecurity.com
Open sourcedebian.org
Open sourcedebian.org
Open sourcedeb.freexian.com
Open sourcedev.maxmind.com
Open sourceopennet.ru
Open sourceopennet.me
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Debian issued security advisories `DSA-6178-1` and `DSA-6179-1` for **Firefox ESR** and **Thunderbird**, releasing updated packages to address unspecified security flaws in the browser and email client. The notices were published through Debian Security Announce and indicate that both widely deployed Mozilla applications received coordinated fixes for vulnerabilities affecting Debian users. The updates highlight continued patching of internet-facing software that commonly processes untrusted web and email content, making both products high-priority targets for exploitation. Organizations running Debian systems should review the relevant advisories, deploy the updated `firefox-esr` and `thunderbird` packages promptly, and verify that endpoints and user workstations are aligned with the latest security releases.
Jun 29, 2026
Debian published two separate security advisories for **Chromium**, identified as `DSA-6171-1` and `DSA-6177-1`, indicating that the browser required repeated package updates to address security issues. The advisories were released through Debian's security announcement channel and point to ongoing remediation work for vulnerabilities affecting the Chromium package in supported Debian environments. The back-to-back notices suggest administrators should verify that Chromium has been updated to the latest Debian-provided build across desktops, virtual workstations, and any systems where the browser is installed. Because the advisories do not include a public synopsis in the referenced notices, defenders should treat the updates as important browser security fixes and prioritize patch deployment to reduce exposure to web-based compromise.
Jun 29, 2026
Debian published two security advisories for **strongSwan**, the open-source IPsec VPN implementation, indicating that vulnerabilities affecting the package required remediation across supported releases. The advisories, `DSA-6176-1` and `DSA-6227-1`, were issued through Debian Security Announce and identify **strongSwan** as the affected component, signaling that administrators relying on Debian-based VPN gateways and remote-access infrastructure should review package status and apply the updated builds. The notices provide limited public detail in the advisory metadata, but the repeated issuance of Debian security updates for **strongSwan** suggests ongoing vulnerability handling for a security-critical networking service commonly used to establish encrypted tunnels and site-to-site connectivity. Organizations using Debian systems for IPsec services should prioritize patch validation and deployment to reduce exposure in internet-facing VPN environments.
Jun 29, 2026