Debian
Debian DSA-6533-1 Updates firefox-esr for Security Vulnerabilities
Debian 13's Firefox ESR update fixes browser security flaws while moving packaging from the 140 to 153 series. Validate managed-browser, profile and extension behavior alongside installation; this is also a branch transition.
Debian DSA-6532-1 Updates tor for a Security Vulnerability
Debian 13 Tor updates address multiple denial-of-service vulnerabilities with fixed package 0.4.9.13-0+deb13u1. Follow the supported trixie update path; the announcement's missing CVE identifiers do not mean the release lacks security impact.
Debian DSA-6531-1 Updates openssl for Security Vulnerabilities
Debian 13 OpenSSL updates address protocol, certificate and signing flaws, with private-key recovery limited to particular conditions. Update loaded libraries and restart consumers; the advisory does not establish that every TLS certificate's key has leaked.
Debian DSA-6530-1 Updates pcre2 for a Security Vulnerability
Debian's PCRE2 backport fixes an out-of-bounds write involving attacker-controlled patterns and certain JIT APIs. Update affected libraries and restart consumers; a lower upstream-looking version does not invalidate Debian's maintained security fix.
Debian DSA-6529-1 Updates libwebsockets for Security Vulnerabilities
Debian 13 libwebsockets updates address missing validation in HPACK path-header parsing, with denial-of-service or possible code-execution risk. Update the actual consuming libraries and processes; not every WebSocket service uses this implementation or parser path.
Debian Updates rsync for 33 Access, Disclosure, and Code-Execution Flaws
Debian 13 rsync updates address thirty-three access, disclosure and execution-related flaws. Inventory both transfer endpoints and scheduled jobs, coordinate restarts, and validate with disposable destinations rather than risking the only backup or live data.
Debian Updates Dovecot for 25 Mail-Server Vulnerabilities
Debian 13 Dovecot updates address twenty-five flaws, including mailbox access-control bypass and malicious Sieve handling. Update affected components, coordinate mail-service restarts, and test both permitted and denied mailbox access with controlled accounts.
Debian Updates WordPress for XSS, Privilege Escalation, and RCE
Debian 13 WordPress updates address three core flaws, including a KEV-listed issue. Confirm the active site is Debian-managed, preserve matching database and files, and coordinate forensic review; core patching does not establish plugin or theme security.
Debian Updates Flatpak for Eight Sandbox Vulnerabilities
Debian 13 Flatpak updates address malicious-application denial of service and information disclosure. Update host-side packages and validate portal workflows while preserving least-privilege permissions; granting broad host-file access is not a substitute for the fix.
Debian Updates libheif for Seven Image-Processing Vulnerabilities
Debian 13 libheif updates address malformed HEIF/AVIF images that can crash consumers, expose memory or potentially execute code. Update the binary libraries used by upload processors and thumbnail workers, assessing bundled copies separately.