Debian 13 Exim updates address SMTP smuggling and separate memory-safety flaws. Preserve configuration and queue state, update the mail transport, and test proxy, TLS and delivery paths; ordinary message delivery alone does not validate every boundary.
Debian 13's Oj update addresses denial of service and memory disclosure in JSON parsing. Check whether each Ruby application loads Debian's package or a bundled gem, update the appropriate copy, and restart affected workers.
Debian 13 Lemonldap::NG updates address access-control, PKCE authorization and disclosure flaws. Update the supported trixie package, coordinate dependent SSO applications, and retain an administrative recovery route; the three issues have different prerequisites.
Debian DSA-6508-1 fixes 16 Chromium CVEs in trixie. Confirm package and runtime versions, apply the supported update, restart, and validate.
