#debianlts — Public Fediverse posts

48 #Debian LTS advisories were released in June fixing 231 CVEs for various packages. These include notable security updates for apache2, asterisk, chromium, firefox-esr, havaged, libinput, nginx, thunderbird, tomcat9 and many more.

In June, Debian 12 (#bookworm) was handed over to the LTS team and the relevant tools and documentation were updated. Debian LTS contributors also prepared updates for more recent releases, Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-06/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

Debian 11 will reach the end of LTS period on August 31 and for continued security support after that, you can subscribe to Freexian's ELTS offer (https://www.freexian.com/lts/extended/?utm_source=mastodon&utm_medium=social).

#debianlts #freexian #asterisk #chromium #nginx #thunderbird

Security support for Debian 12 Bookworm handed over to the Debian LTS team three years after the initial release

https://www.debian.org/News/2026/20260712

#debian #bookworm #debianLTS #linux

#Debian LTS contributors released 56 DLAs fixing 877 CVEs in May, a larger number than usual. The Kernel team deserves a special mention for handling the disclosed vulnerabilities on #linux regarding Local Privilege Escalation with public proof-of-concept exploits. On the LTS side, the Front Desk team also triaged a significant flow of high severity CVEs and notable security updates were released for exim, gnutls28, krb5, lemonldap-ng, imagemagick, openjdk-11, openjdk-17, php7.4, python3.9 and more.

Several patches were prepared by Catalyst for #Samba 4.17 shipped with Debian 12, to fix vulnerabilities disclosed in May, thanks to Freexian's partnership with them to extend the support.

LTS team also contributed with updates to the latest Debian releases, #bookworm and #trixie.

Read the details in our full report at https://www.freexian.com/blog/debian-lts-report-2026-05/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debianlts #freexian #exim #imagemagick #linuxkernel #LPE

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

24 Debian LTS Advisories fixing 250 CVEs for various packages were released by Debian LTS contributors in March 2026. These include notable security updates for ansible, asterisk, gimp, gst-plugins-base1.0, gst-plugins-ugly1.0, imagemagick, libpng1.6, linux kernel, roundcube, strongswan and more.

In addtion to the LTS contributions, the team also prepared updates for recent releases - Debian 12(#bookworm), Debian 13(#trixie) and Debian unstable.

Read the full report at https://www.freexian.com/blog/debian-lts-report-2026-03/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits)

#debian #debianlts #freexian #ansible #imagemagick

A quick question regarding Debian: A Debian version receives 3 years of support, I know that much. But then there is also LTS which extends support for another 2 years, making it 5 overall.

Do I have to be proactive in any way to get those LTS updates? Or will they be automatically enabled without any notice?

What I found online left me a bit confused, so I'm thankful for anyone able to help.

#Debian #DebianLTS #LTS

35 Debian LTS advisories were released in February fixing 527 CVEs across various packages. These include security fixes for gnutls28, xrdp, ClamAV, tomcat9, zabbix, linux kernel, ceph, glib2.0, MUNGE and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm) , Debian 13 (#trixie) and Debian unstable. In addition, improvements were made to documentation and tooling used by the team.

Read the full report at https://www.freexian.com/blog/debian-lts-report-2026-02/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #ceph #zabbix

41 Debian LTS Advisories were released in December fixing 252 CVEs. These included notable security updates for libsoup2.4, glib2.0, lasso, #roundcube, #mediawiki, python-apt and libpng1.6. In addition, upstream fixes were proposed for seven CVEs in #ffmpeg and various updates to latest Debian releases was contributed by #Debian LTS team.

Full report: https://www.freexian.com/blog/debian-lts-report-2025-12/?utm_source=mastodon&utm_medium=social

This work is funded through Freexian’s Debian LTS offering. Consider sponsoring Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) to support this effort and benefit from it: https://www.freexian.com/lts/debian/details/#benefits

#freexian #debianlts

In November, Debian LTS contributors released 33 Debian LTS Advisories, fixing 219 CVEs across multiple packages. Notable updates included security fixes for bind9, unbound, pdfminer, firefox-esr, thunderbird, and the Linux 6.1 kernel.

In addition, the LTS team also contributed security updates to latest Debian releases and carried out significant work to revamp the LTS team documentation.

Read the full report here:
https://www.freexian.com/blog/debian-lts-report-2025-11/?utm_source=mastodon&utm_medium=social

This work is funded through Freexian’s Debian LTS offering. Consider sponsoring Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) to support this effort and benefit from it: https://www.freexian.com/lts/debian/details/#benefits

#freexian #debianLTS #debian #linux #bind9 #unbound #thunderbird

37 Debian LTS Advisories about security updates for various packages were released by Debian LTS contributors in October. These include notable security updates for https-everywhere, openjdk 11 & 17 and intel-microcode. LTS team also contributed towards updates for Debian packages in various releases.

Read about these and more in our report for October: https://www.freexian.com/blog/debian-lts-report-2025-10/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#freexian #debian #debianlts #openjdk

38 Debian LTS Advisories about security updates for various packages were released by Debian LTS contributors last month. These include notable security updates for modsecurity-apache, cups, python-django, thunderbird and many more.

Read our monthly report for September to know more details: https://www.freexian.com/blog/debian-lts-report-2025-09/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#freexian #debian #debianlts #cups #modsecurity-apache #thunderbird #django

27 Debian LTS Advisories about security updates were released by Debian LTS contributors in August 2025. These included critical security updates for gnutls28, mdebtls, apache2 and openjdk-17 in addition to other security updates. LTS team also contributed to updates for various packages in Debian stable.

Get the full details in our August report: https://www.freexian.com/blog/debian-lts-report-2025-08/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and join the esteemed list of sponsors in the monthly report.

#debianlts #freexian #apache2 #openjdk17

The critical security updates for angular.js, tomcat9, mediawiki, php7.4 and more landed in Debian 11 "bullseye" by the efforts of the Debian LTS team in July 2025. The security tracker sprint involving members from the LTS team and Debian Security team also happened during July as part of DebCamp 25.

Get the full report covering the details here: https://www.freexian.com/blog/debian-lts-report-2025-07/

This work is funded by Freexian's Debian LTS offering. Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#debianlts #freexian #angular #php7.4

Interested in how Debian LTS works and what’s ahead?

The recorded BoF session from #DebConf25 is now online!

The session had engaging discussions on having point-update “releases” for LTS with Debusine, packaging security updates for firmware-nonfree, ca-certificates, and work towards compliance with new regulations like the #CRA.

Watch the recording here: https://meetings-archive.debian.net/pub/debian-meetings/2025/DebConf25/debconf25-670-debian-lts-bof.av1.webm

#debian #debianLTS #linuxsecurity #freexian

Debian 13 “trixie” is now the new Debian stable!

It will be supported for the next 5 years by the Debian Security team (https://security-team.debian.org/) and Debian LTS (https://wiki.debian.org/LTS) team, with up to 10 years of support via Freexian’s Extended LTS (https://www.freexian.com/lts/extended/).

A big congratulations and thank you to everyone who made this release possible!

#debian #debian13 #trixie #debianlts #LongTermSupport #linuxsecurity #freexian

54 Debian LTS Advisories about security updates for various packages were released by Debian LTS contributors last month. These include critical security bug fixes for containerd, postgresql-13, request-tracker4, glibc and many more.

You can also read about LTS contributors testing out Debusine, an advanced CI platform for Debian-based distributions developed by Freexian, to upload packages into Debian and plans for an upcoming "sprint" during DebCamp 25.

Find more details in our monthly report for May: https://www.freexian.com/blog/debian-lts-report-2025-05/

This work is funded by Freexian's Debian LTS offering. Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#openjdk #postgres13 #debusine #freexian #debianlts

Debian LTS contributors released 46 Debian LTS Advisories about security updates for various packages in April 2025.

These include critical security bug fixes for jetty9, zabbix and glibc and more. Also several LTS contributors prepared packages for the recent point release of current stable Debian 12, with many prepared in conjunction with related LTS updates of the same packages.

Read more about this in our monthly report for April here: https://www.freexian.com/blog/debian-lts-report-2025-04/

This work is funded by Freexian's Debian LTS offering.

Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#debian #debianlts #freexian #infosec #glibc

31 Debian LTS Advisories were released in March about security updates for various packages including but not limited to linux-6.1, firefox-esr, intel-microcode and vim.

Read more about work done by Debian LTS contributors in our monthly report for March at https://www.freexian.com/blog/debian-lts-report-2025-03/

This work is funded by Freexian's Debian LTS offering.

Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#debian #debianlts #freexian #infosec #linux #vim

February was a very busy month for the Debian LTS contributors. 38 Debian LTS Advisories were released in February about security updates for various packages including but not limited to pam-u2f, openjdk-17, postgresql-13, openssh, thunderbird, freerdp2 and ffmpeg.

The monthly report on the work done is available at https://www.freexian.com/blog/debian-lts-report-2025-02/

This work is funded by Freexian's Debian LTS offering.

Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#debian #debianlts #freexian #infosec

Did you know that the Debian LTS team released 33 Debian LTS Advisories regarding security updates during January 2025?

Read the work done by Debian LTS contributors in our monthly report, now available at https://www.freexian.com/blog/debian-lts-report-2025-01/

This work is funded by Freexian's Debian LTS offering.

Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#debian #debianlts #freexian #cybersecurity

The monthly report about the work done by Debian LTS contributors in December 2024 is available now - https://www.freexian.com/blog/debian-lts-report-2024-12/

This work is funded by Freexian's Debian LTS offering.

Sponsor the Debian LTS (https://www.freexian.com/lts/debian/) to join the esteemed list of sponsors in the monthly report.

#debianLTS #debian #freexian

Thanks to all the sponsors and different Debian Teams that have made Debian LTS possible.

#debianLTS #debian #freexian

When Debian LTS (https://wiki.debian.org/LTS) started in 2014 for Debian 6 "squeeze",
(https://web.archive.org/web/20240720200316/https://www.debian.org/News/2014/20140616)
we didn't have any certainty about its future success.

Ten years later, we are happy to announce that more than 4000 security updates have been published under the LTS initiative.

More precisely, DLA 4000-1 (https://lists.debian.org/debian-lts-announce/2024/12/msg00022.html)
was released on 21st December 2024 by Guilhem Moulin to fix three CVEs in sqlparse.

#debianLTS #debian #freexian

The monthly report of the work done by Debian LTS contributors in November is now available at - https://www.freexian.com/blog/debian-lts-report-2024-11/
This work is funded by Freexian's Debian LTS offering.

Your organization too can sponsor the Debian LTS (https://www.freexian.com/lts/debian/) and join the esteemed list of sponsors in the monthly report.

#debianLTS #debian #freexian

By the way, the monthly report for this September is published and is available at https://www.freexian.com/blog/debian-lts-report-2024-09/

#debian #debianlts #freexian

@osm_tech

Congratulations on the successful upgrade to Debian 12. We are glad that #debianLTS project also helped in making this choice.

Temporary remediation

While we prepare updates for the different Debian releases, this is a list of actions that remediate the exposure to the vulnerabilities:
Remove cups from BrowseRemoteProtocols in /etc/cups/cups-browsed.conf or disable cups-browsed if possible
Block any incoming traffic to the 631 UDP port

Thanks to the Debian Security Team for their collaboration on addressing these issues!

#debian #freexian #debianlts #debiansecurity