Debian 13 Exim updates address SMTP smuggling and separate memory-safety flaws. Preserve configuration and queue state, update the mail transport, and test proxy, TLS and delivery paths; ordinary message delivery alone does not validate every boundary.
Debian 13's Oj update addresses denial of service and memory disclosure in JSON parsing. Check whether each Ruby application loads Debian's package or a bundled gem, update the appropriate copy, and restart affected workers.
Debian 13 Lemonldap::NG updates address access-control, PKCE authorization and disclosure flaws. Update the supported trixie package, coordinate dependent SSO applications, and retain an administrative recovery route; the three issues have different prerequisites.
Debian DLA-4789-1 fixes 12 libde265 CVEs and two additional flaws. Find H.265 decoding paths, update Debian 12, restart, validate, and retain evidence.
Debian DSA-6508-1 fixes 16 Chromium CVEs in trixie. Confirm package and runtime versions, apply the supported update, restart, and validate.
Debian DLA-4788-1 fixes 414 Linux 6.12 CVEs in Debian 12. Match installed and running kernels, apply the supported update, and retain evidence.
