#freexian — Public Fediverse posts

Cybersecurity agencies, including CISA (USA), ENISA (EU) and ACN (Italy), report active exploitation of PHP2Shell vulnerabilities. On affected Linux systems, attackers may be able to chain this with kernel vulnerabilities like "Fragnesia" to gain root access. Reports also indicate many systems remain unpatched to this day.

Don't wait until it's too late!

We provide fixes for PHP2Shell vulnerabilities and more for 12 PHP versions on 10 Debian/Ubuntu releases with our PHP-LTS service (https://www.freexian.com/lts/php/?utm_source=mastodon&utm_medium=social)

#PHP2Shell #phplts #freexian #fragnesia

#Debian LTS contributors released 41 DLAs fixing 1854 CVEs in September. Notable security updates were released for jbig2dec, linux-6.12, lxml, nginx, openssl, redis and more. In addition, Debian LTS contributors also prepared updates for the latest Debian releases. A lot of hard work was done behind the scenes by our Front Desk Fellows.

Our full report on all of it is available at https://www.freexian.com/blog/debian-lts-report-2026-09/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. If you benefit from Debian, especially throughout its full 5-year lifecycle, become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy more benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debianlts #freexian #linux #lxml #nginx #openssl #redis

Don't wait for the next #PHP2Shell to plan your security updates. Running an older PHP version? Freexian's PHP LTS offerings can help you stay secure while you plan upgrades on your own timeline. Explore your options: https://www.freexian.com/lts/php/?utm_source=mastodon&utm_medium=social

Follow the guide: https://www.freexian.com/blog/php2shell-updates/?utm_source=mastodon&utm_medium=social to get access asap.

#freexian #phplts #php

Affected by PHP2Shell (CVE-2026-109618/CVE-2026-109619)? Freexian’s PHP LTS provides updates for PHP 5.6 and later on Debian 9+ and Ubuntu 18.04+. Explore our plans at https://www.freexian.com/lts/php/?utm_source=mastodon&utm_medium=social or get in touch to discuss your options.

#php2shell #php #freexian

The September 2026 contributions report, covering contributions to #Debian by #Freexian collaborators, is now available at https://www.freexian.com/blog/debian-contributions-09-2026/?utm_source=mastodon&utm_medium=social

Read about the new experimental backend for autopkgtest using pconr, the site visit in preparation for DebConf 27 and more.

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#autopkgtest #erofs #python

#Debian LTS contributors released 58 DLAs fixing 1885 CVEs in August. Linux kernel, chromium and thunderbird had the most number of CVEs fixed. Other notable security updates were released for 7zip, ca-certificates, firefox-esr, nss, libgd2, nvidia-graphics-drivers, postgresql-15, roundcube, unzip, xorg-server and more.

Debian LTS contributors also prepared updates for the stable release, Debian 13 (#trixie).

Read the details in our full report at https://www.freexian.com/blog/debian-lts-report-2026-08/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

Debian 11 reached the end of LTS period on August 31 and for continued security support, you can subscribe to Freexian's ELTS offer (https://www.freexian.com/lts/extended/?utm_source=mastodon&utm_medium=social).

#chromium #linux #postgresql15 #ruby27 #thunderbird #freexian

The August 2026 contributions report, covering contributions to Debian by Freexian collaborators, is now available at https://www.freexian.com/blog/debian-contributions-08-2026/?utm_source=mastodon&utm_medium=social

The report covers work done to improve security-tracker git performance in detail. Also read about OpenSSH GSS-API split getting completed and landing in testing, Incus replacing lxc in Debian CI, DebConf videos getting published and more.

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#debian #freexian #incus #lxc #openssh #gssapi

Debusine now supports debug symbol packages thanks to this year's Debusine GSoC project, debuginfod server.

The debuginfod server functionality was added to #Debusine so that it not only hosts -dbgsym packages, but also serves their debug symbols over the debuginfod protocol.

Read the blog post by the GSoC contributor, Jugal Patel, to learn more about the feature and how the support was added: https://www.freexian.com/blog/debusine-debug-symbols/?utm_source=mastodon&utm_medium=social

#debuginfod #freexian #gsoc

RE: https://framapiaf.org/@debian/117195355821981953

Freexian's Extended LTS for Debian (https://www.freexian.com/lts/extended/?utm_source=mastodon&utm_medium=social) will add another 5 years of security support for Debian 11, i.e., till 30 June 2031.

You can maintain the server security by subscribing to our ELTS offer if upgrading to a newer release is not an option for you.

Along with Debian 11, Freexian’s Extended LTS currently supports Debian 9 (#stretch) until 30 June 2027 and Debian 10 (#buster), until 30 June 2029.

#debian #freexian #debianelts

#Debian LTS contributors released 52 DLAs fixing 2159 CVEs in July. Notable security updates were released for the #linux kernel, grub2, imagemagick, jq, nginx, nss, poppler, samba and more.

Debian LTS team took full responsibility of Debian 12 (#bookworm) in July after its last point release.

Debian LTS contributors also prepared updates for the stable release, Debian 13 (#trixie).

Read the details in our full report at https://www.freexian.com/blog/debian-lts-report-2026-07/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debianlts #freexian #imagemagick #jq #poppler

Organizing DebConf 26, adding VLAN support in Debian installer. #Freexian collaborators worked on these and many more contributions to #Debian in July 2026.

Read all the details at https://www.freexian.com/blog/debian-contributions-07-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#cpython #debconf26 #vlantagging

48 #Debian LTS advisories were released in June fixing 231 CVEs for various packages. These include notable security updates for apache2, asterisk, chromium, firefox-esr, havaged, libinput, nginx, thunderbird, tomcat9 and many more.

In June, Debian 12 (#bookworm) was handed over to the LTS team and the relevant tools and documentation were updated. Debian LTS contributors also prepared updates for more recent releases, Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-06/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

Debian 11 will reach the end of LTS period on August 31 and for continued security support after that, you can subscribe to Freexian's ELTS offer (https://www.freexian.com/lts/extended/?utm_source=mastodon&utm_medium=social).

#debianlts #freexian #asterisk #chromium #nginx #thunderbird

RE: https://framapiaf.org/@debian/116941751353828037

Freexian is proud to be a sponsor of the Debian conference. Many of our collaborators are involved in the conference preparations.

DebConf26 starts today in Santa Fe, Argentina at 1:00 PM UTC.

Please visit https://debconf26.debconf.org/ for more details about the conference and find today's schedule at https://debconf26.debconf.org/schedule/?block=34

#debconf26 #debian #freexian

Debian project’s security support for Debian 11 (#bullseye) will end on 31 August 2026.

Freexian's Extended LTS for Debian (https://www.freexian.com/lts/extended/?utm_source=mastodon&utm_medium=social) will now include Debian 11, extending the security support up to 30 June 2031.

If your organization is running production systems on Debian 11, it's time to upgrade to a newer release. You can maintain the server security by subscribing to our ELTS offer if upgrading to a newer release is not an option at this time.

Along with Debian 11, Freexian’s Extended LTS currently supports Debian 9 (#stretch) until 30 June 2027 and Debian 10 (#buster), until 30 June 2029.

Official announcement : https://www.freexian.com/blog/extended-lts-for-debian-11/?utm_source=mastodon&utm_medium=social

#debian #freexian #debianelts

#Freexian collaborators worked on preparations for DebConf 26, Python 3.14 as default transition, debvm, programmable container runtime and many more contributions to #Debian in June 2026.

Read all the details at https://www.freexian.com/blog/debian-contributions-06-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social)
and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#debconf26 #gsoc2026 #python314

We are pleased to announce two new updates to Freexian's PHP LTS offer. PHP 8.5 has been added to the list of supported PHP versions and is available for Debian 10, 11, 12 and 13, as well as Ubuntu 20.04, 22.04, 24.04 and 26.04. We have also added support for Ubuntu 26.04 Resolute, which is available with PHP versions 5.6, 7.0, 7.1, 7.2, 7.3, 7.4, 8.0, 8.1, 8.2, 8.3, 8.4 and 8.5.

Visit the PHP LTS offer page: https://www.freexian.com/lts/php/?utm_source=mastodon&utm_medium=social to see a complete matrix of supported PHP versions on Ubuntu and Debian releases.

This service is brought to you by Freexian in cooperation with @ondrej

#debian #freexian #lts #phplts #ubuntu

#Debian LTS contributors released 56 DLAs fixing 877 CVEs in May, a larger number than usual. The Kernel team deserves a special mention for handling the disclosed vulnerabilities on #linux regarding Local Privilege Escalation with public proof-of-concept exploits. On the LTS side, the Front Desk team also triaged a significant flow of high severity CVEs and notable security updates were released for exim, gnutls28, krb5, lemonldap-ng, imagemagick, openjdk-11, openjdk-17, php7.4, python3.9 and more.

Several patches were prepared by Catalyst for #Samba 4.17 shipped with Debian 12, to fix vulnerabilities disclosed in May, thanks to Freexian's partnership with them to extend the support.

LTS team also contributed with updates to the latest Debian releases, #bookworm and #trixie.

Read the details in our full report at https://www.freexian.com/blog/debian-lts-report-2026-05/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debianlts #freexian #exim #imagemagick #linuxkernel #LPE

Improving Go default compatibility in #Debian, trimming build-essential, Python upstream engagement. #Freexian collaborators worked on these and many more contributions to Debian in May 2026.

Read all the details at https://www.freexian.com/blog/debian-contributions-05-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#golang #openssh #PyConUs

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

#Freexian collaborators worked on detecting undeclared file conflicts, mini-sprint improving contributors.debian.org, security-tracker performance, fixing dput-ng data loss bug, MiniDebConf Campinas and many more contributions to #Debian in April 2026.

Read all the details at https://www.freexian.com/blog/debian-contributions-04-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#dput-ng #linux #openssh

RE: https://hachyderm.io/@freexian/116555001831661560

It was certainly an interesting cooperation between developers and sysadmin to get rid of the performance issues we faced! debusine.debian.net is becoming a non-trivial deployment where scaling issues can create real usability issues for end-users.
#debian #debusine #freexian

In the latest in a series of articles about Debusine, our developers and sysadmins do a deep dive on how they managed to investigate and fix #Debusine workflow performance issues caused by complex interactions between a series of database concurrency and worker communication issues.

It involved delicate work to avoid system deadlocks, optimizing our workflow orchestration, scheduling fixes, worker refactoring and reducing the high database write volume.

Read the detailed breakdown at https://www.freexian.com/blog/debusine-performance-issues/?utm_source=mastodon&utm_medium=social

#freexian #debian #postgresql #scheduling #refactoring

Freexian is excited to support MiniDebConf Hamburg, currently underway at dock europe, Hamburg, Germany!

The talks are scheduled on May 9 and 10. If you can’t attend in person, the talks will also be live-streamed: https://hamburg2026.mini.debconf.org/

#debian #MiniDebConf #MiniDebConfHamburg2026 #freexian

A few snapshots of the Freexian team from MiniDebConf Campinas 2026.

Our collaborators took part as organizers, speakers, and attendees. Proud to support and engage with the Debian Brasil community.

Thanks to everyone who made it a success!

#debian #freexian #miniDebConfCampinas #debianbrasil

24 Debian LTS Advisories fixing 250 CVEs for various packages were released by Debian LTS contributors in March 2026. These include notable security updates for ansible, asterisk, gimp, gst-plugins-base1.0, gst-plugins-ugly1.0, imagemagick, libpng1.6, linux kernel, roundcube, strongswan and more.

In addtion to the LTS contributions, the team also prepared updates for recent releases - Debian 12(#bookworm), Debian 13(#trixie) and Debian unstable.

Read the full report at https://www.freexian.com/blog/debian-lts-report-2026-03/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits)

#debian #debianlts #freexian #ansible #imagemagick

Freexian is proud to be a sponsor of MiniDebConf Campinas 2026 which will take place from April 23 to 25 at the State University of Campinas. The MiniDebCamp is already underway! We wish the organizing team and all the attendees a successful and enjoyable event.

https://campinas.mini.debconf.org/

#debian #debianbrasil #freexian #miniDebConfCampinas

Debusine projects in GSoC, incus backend landing in Debian CI and other updates, Salsa CI maintenance. #Freexian collaborators worked on these and many more contributions to #Debian in March 2026.

Read all the details at https://www.freexian.com/blog/debian-contributions-03-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#incus #gsoc #debusine #debianci

35 Debian LTS advisories were released in February fixing 527 CVEs across various packages. These include security fixes for gnutls28, xrdp, ClamAV, tomcat9, zabbix, linux kernel, ceph, glib2.0, MUNGE and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm) , Debian 13 (#trixie) and Debian unstable. In addition, improvements were made to documentation and tooling used by the team.

Read the full report at https://www.freexian.com/blog/debian-lts-report-2026-02/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #ceph #zabbix

Debusine's QA pipelines, which checks if #Debian packages are ready to upload, have recently gained a regression tracking mechanism. The regressions are found by checking for new failures in autopkgtests for packages in the archive that depends on the built package.

Read the new #Debusine blog post at https://www.freexian.com/blog/debusine-regression-tracking/?utm_source=mastodon&utm_medium=social to know more about how it works and how you can use it in your own workflows.

#regressiontracking #freexian #QA

Opening DebConf 26 registration, improvements to #Debian CI and many more contributions to Debian were made by #Freexian collaborators in February.

Read all the details at https://www.freexian.com/blog/debian-contributions-02-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#debianci #debconf26 #openssh