Security Information

• Keeping your Debian System secure
• Recent Advisories
• Sources of Security Information

Experience has shown that security through obscurity never works. Therefore, public disclosure allows for quicker and better solutions of security problems. In that respect, this page addresses Debian's status regarding various known security holes, which could potentially affect the Debian operating system.

The Debian project coordinates many security advisories with other free software vendors, and as a result, these advisories are published the same day a vulnerability is made public. In order to receive the latest Debian security advisories, please subscribe to the debian-security-announce mailing list.

Debian also participates in security standardization efforts:

• The Debian Security Advisories are CVE-Compatible
• Debian publishes its security information using the Open Vulnerability Assessment Language (OVAL)

The packages unattended-upgrades can be installed to keep the computer current with the latest security (and other) updates automatically. The wiki entry has more detailed information how to manually set up .

For more information about security issues in Debian, please refer to our FAQ and our documentation:

RSS

These are the recent Debian Security Advisories (DSA) posted to the debian-security-announce list.
T is the link to the Debian Security Tracker information, the DSA number links to the announcement mail.

T  DSA-6373-1 lxd security update
T  DSA-6372-1 tor security update
T  DSA-6370-1 incus security update
T  DSA-6369-1 pdns-recursor security update
T  DSA-6368-1 pdns security update
T  DSA-6367-1 dnsdist security update
T  DSA-6366-1 sogo security update
T  DSA-6365-1 libssh2 security update
T  DSA-6364-1 chromium security update
T  DSA-6363-1 python-urllib3 security update
T  DSA-6362-1 gst-plugins-bad1.0 security update
T  DSA-6361-1 ffmpeg security update
T  DSA-6360-1 squid security update
T  DSA-6359-1 gst-plugins-good1.0 security update
T  DSA-6358-1 libhttp-daemon-perl security update
T  DSA-6357-1 pillow security update
T  DSA-6356-1 imagemagick security update
T  DSA-6355-1 linux security update
T  DSA-6354-1 libconfig-inifiles-perl security update
T  DSA-6353-1 gst-libav1.0 security update
T  DSA-6351-1 thunderbird security update
T  DSA-6350-1 firefox-esr security update
T  DSA-6349-1 atril security update
T  DSA-6348-1 gsasl security update
T  DSA-6347-1 bird2 security update
T  DSA-6346-1 libreoffice security update
T  DSA-6345-1 libgd-perl security update
T  DSA-6344-1 chromium security update
T  DSA-6343-1 librabbitmq security update
T  DSA-6342-1 jpeg-xl security update
T  DSA-6341-1 ironic security update
T  DSA-6340-1 neutron security update
T  DSA-6339-1 libinput security update
T  DSA-6338-1 libdbi-perl security update
T  DSA-6337-1 chromium security update
T  DSA-6336-1 jackson-core security update
T  DSA-6335-1 openssl security update
T  DSA-6334-1 poppler security update
T  DSA-6333-1 mistral security update
T  DSA-6332-1 okular security update
T  DSA-6331-1 keystone security update
T  DSA-6330-1 strongswan security update
T  DSA-6329-1 tomcat11 security update
T  DSA-6328-1 tomcat10 security update
T  DSA-6327-1 request-tracker4 security update
T  DSA-6326-1 nginx security update
T  DSA-6325-1 chromium security update
T  DSA-6324-1 request-tracker5 security update
T  DSA-6323-1 apache2 security update
T  DSA-6322-1 frr security update
T  DSA-6321-1 ceph security update
T  DSA-6320-1 php-twig security update
T  DSA-6319-1 yelp security update
T  DSA-6318-1 gst-plugins-good1.0 security update
T  DSA-6317-1 symfony security update
T  DSA-6316-1 chromium security update
T  DSA-6315-1 cyborg security update
T  DSA-6314-1 swift security update
T  DSA-6313-1 dovecot security update
T  DSA-6312-1 symfony security update
T  DSA-6311-1 php-twig security update
T  DSA-6310-1 imagemagick security update
T  DSA-6309-1 exim4 security update
T  DSA-6308-1 nagios4 security update
T  DSA-6307-1 kitty security update
T  DSA-6306-1 linux security update
T  DSA-6305-1 linux security update
T  DSA-6304-1 unbound security update
T  DSA-6303-1 varnish security update
T  DSA-6302-1 starlette security update
T  DSA-6301-1 roundcube security update
T  DSA-6300-1 node-shell-quote security update
T  DSA-6299-1 kdenlive security update
T  DSA-6298-1 imagemagick security update
T  DSA-6297-1 samba security update
T  DSA-6296-1 spip security update
T  DSA-6295-1 linux security update
T  DSA-6294-1 libgcrypt20 security update
T  DSA-6293-1 krb5 security update
T  DSA-6292-1 haveged security update
T  DSA-6291-1 haproxy security update
T  DSA-6290-1 nss security update
T  DSA-6289-1 openvpn security update
T  DSA-6288-1 thunderbird security update
T  DSA-6287-1 chromium security update
T  DSA-6286-1 evince security update
T  DSA-6285-1 bind9 security update
T  DSA-6284-1 pdns security update
T  DSA-6283-1 firefox-esr security update
T  DSA-6282-1 rsync security update
T  DSA-6281-1 gnutls28 security update
T  DSA-6280-1 netatalk security update
T  DSA-6279-1 redis security update
T  DSA-6278-1 nginx security update
T  DSA-6277-1 openjpeg2 security update
T  DSA-6276-1 ffmpeg security update
T  DSA-6275-1 linux security update
T  DSA-6274-1 linux security update
T  DSA-6273-1 chromium security update
T  DSA-6272-1 nodejs security update
T  DSA-6271-1 gsasl security update
T  DSA-6270-1 postgresql-17 security update
T  DSA-6269-1 postgresql-15 security update
T  DSA-6268-1 ffmpeg security update
T  DSA-6267-1 thunderbird security update
T  DSA-6266-1 nghttp2 security update
T  DSA-6265-1 exim4 security update
T  DSA-6264-1 dnsmasq security update
T  DSA-6263-1 libpng1.6 security update
T  DSA-6262-1 lcms2 security update
T  DSA-6261-1 corosync security update
T  DSA-6260-1 tor security update
T  DSA-6259-1 pyjwt security update
T  DSA-6258-1 linux security update
T  DSA-6257-1 postorius security update
T  DSA-6256-1 php8.4 security update
T  DSA-6255-1 php8.2 security update
T  DSA-6254-1 firefox-esr security update
T  DSA-6253-1 linux security update
T  DSA-6252-1 prosody security update
T  DSA-6251-1 libreoffice security update
T  DSA-6250-1 chromium security update
T  DSA-6249-1 wireshark security update
T  DSA-6248-1 apache2 security update
T  DSA-6247-1 lxd security update
T  DSA-6246-1 openjdk-25 security update
T  DSA-6245-1 imagemagick security update
T  DSA-6244-1 incus security update
T  DSA-6243-1 linux security update
T  DSA-6242-1 thunderbird security update
T  DSA-6241-1 python-aiohttp security update
T  DSA-6240-1 imagemagick security update
T  DSA-6197-3 dovecot regression update
T  DSA-6239-1 chromium security update
T  DSA-6238-1 linux security update
T  DSA-6237-1 openjdk-17 security update
T  DSA-6236-1 firefox-esr security update
T  DSA-6235-1 dnsdist security update
T  DSA-6234-1 pdns-recursor security update
T  DSA-6233-1 pdns security update
T  DSA-6232-1 webkit2gtk security update
T  DSA-6231-1 openjdk-21 security update
T  DSA-6230-1 chromium security update
T  DSA-6229-1 thunderbird security update
T  DSA-6228-1 cpp-httplib security update
T  DSA-6227-1 strongswan security update
T  DSA-6226-1 packagekit security update
T  DSA-6225-1 firefox-esr security update
T  DSA-6224-1 xdg-dbus-proxy security update
T  DSA-6223-1 flatpak security update
T  DSA-6222-1 ngtcp2 security update
T  DSA-6221-1 ntfs-3g security update
T  DSA-6220-1 simpleeval security update
T  DSA-6219-1 pillow security update
T  DSA-6218-1 mupdf security update
T  DSA-6217-1 luanti security update
T  DSA-6216-1 opam security update
T  DSA-6215-1 gimp security update
T  DSA-6214-1 chromium security update
T  DSA-6213-1 lxd security update
T  DSA-6212-1 incus security update
T  DSA-6211-1 thunderbird security update
T  DSA-6210-1 imagemagick security update
T  DSA-6209-1 xdg-dbus-proxy security update
T  DSA-6208-1 mediawiki security update
T  DSA-6207-1 flatpak security update
T  DSA-6206-1 gdk-pixbuf security update
T  DSA-6205-1 chromium security update
T  DSA-6204-1 openssh security update
T  DSA-6202-1 firefox-esr security update
T  DSA-6201-1 openssl security update
T  DSA-6197-2 dovecot regression update
T  DSA-6200-1 tor security update
T  DSA-6199-1 trafficserver security update
T  DSA-6198-1 valkey security update
T  DSA-6197-1 dovecot security update
T  DSA-6196-1 roundcube security update
T  DSA-6195-1 python-tornado security update
T  DSA-6194-1 pyasn1 security update
T  DSA-6193-1 inetutils security update
T  DSA-6192-1 chromium security update
T  DSA-6191-1 gst-plugins-ugly1.0 security update
T  DSA-6190-1 gst-plugins-bad1.0 security update
T  DSA-6189-1 libpng1.6 security update
T  DSA-6188-1 lxd security update
T  DSA-6187-1 php-phpseclib3 security update
T  DSA-6186-1 php-phpseclib security update
T  DSA-6185-1 phpseclib security update
T  DSA-6184-1 incus security update
T  DSA-6183-1 nodejs security update
T  DSA-6182-1 libxml-parser-perl security update
T  DSA-6181-1 bind9 security update
T  DSA-6180-1 ruby-rack security update
T  DSA-6179-1 thunderbird security update
T  DSA-6178-1 firefox-esr security update
T  DSA-6177-1 chromium security update
T  DSA-6176-1 strongswan security update
T  DSA-6175-1 libyaml-syck-perl security update
T  DSA-6174-1 spip security update
T  DSA-6173-1 freeciv security update
T  DSA-6172-1 webkit2gtk security update
T  DSA-6171-1 chromium security update
T  DSA-6170-1 snapd security update
T  DSA-6169-1 imagemagick security update
T  DSA-6168-1 freetype security update
T  DSA-6167-1 gst-plugins-base1.0 security update
T  DSA-6166-1 nodejs security update
T  DSA-6165-1 chromium security update
T  DSA-6164-1 chromium security update
T  DSA-6163-1 linux security update
T  DSA-6162-1 linux security update
T  DSA-6161-1 multipart security update
T  DSA-6160-1 netty security update
T  DSA-6159-1 imagemagick security update
T  DSA-6158-1 imagemagick security update
T  DSA-6157-1 chromium security update
T  DSA-6156-1 gimp security update
T  DSA-6155-1 spip security update
T  DSA-6154-1 php8.2 security update
T  DSA-6153-1 lxd security update
T  DSA-6152-1 thunderbird security update
T  DSA-6151-1 chromium security update
T  DSA-6150-1 python-django security update
T  DSA-6149-1 nss security update
T  DSA-6148-1 firefox-esr security update
T  DSA-6147-1 pillow security update
T  DSA-6146-1 chromium security update
T  DSA-6145-1 nova security update
T  DSA-6144-1 inetutils security update
T  DSA-6143-1 libvpx security update
T  DSA-6142-1 gegl security update
T  DSA-6141-1 linux security update
T  DSA-6140-1 gnutls28 security update
T  DSA-6139-1 gimp security update
T  DSA-6138-1 libpng1.6 security update
T  DSA-6137-1 roundcube security update
T  DSA-6136-1 python-django security update
T  DSA-6135-1 chromium security update
T  DSA-6134-1 pdns-recursor security update
T  DSA-6133-1 postgresql-17 security update
T  DSA-6132-1 postgresql-15 security update
T  DSA-6131-1 nginx security update
T  DSA-6130-1 haproxy security update
T  DSA-6129-1 munge security update
T  DSA-6128-1 shaarli security update
T  DSA-6127-1 linux security update
T  DSA-6126-1 linux security update
T  DSA-6125-1 usbmuxd security update
T  DSA-6124-1 wireshark security update
T  DSA-6123-1 xrdp security update
T  DSA-6122-1 chromium security update
T  DSA-6121-1 tomcat11 security update
T  DSA-6120-1 tomcat10 security update
T  DSA-6119-1 openjdk-25 security update
T  DSA-6118-1 thunderbird security update
T  DSA-6117-1 python-django security update
T  DSA-6116-1 chromium security update
T  DSA-6115-1 gimp security update
T  DSA-6114-1 pyasn1 security update
T  DSA-6113-1 openssl security update
T  DSA-6112-1 openjdk-21 security update
T  DSA-6111-1 imagemagick security update
T  DSA-6110-1 openjdk-17 security update
T  DSA-6109-1 incus security update
T  DSA-6102-2 python-urllib3 regression update
T  DSA-6108-1 chromium security update
T  DSA-6107-1 bind9 security update
T  DSA-6106-1 inetutils security update
T  DSA-6105-1 modsecurity-crs security update
T  DSA-6104-1 python-keystonemiddleware security update
T  DSA-6103-1 thunderbird security update
T  DSA-6102-1 python-urllib3 security update
T  DSA-6101-1 firefox-esr security update
T  DSA-6100-1 chromium security update
T  DSA-6099-1 python-parsl security update
T  DSA-6098-1 net-snmp security update
T  DSA-6097-1 chromium security update
T  DSA-6096-1 vlc security update
T  DSA-6095-1 foomuuri security update
T  DSA-6094-1 libsodium security update
T  DSA-6093-1 gimp security update
T  DSA-6092-1 smb4k security update
T  DSA-6091-1 wordpress security update
T  DSA-6090-1 rails security update
T  DSA-6089-1 chromium security update
T  DSA-6088-1 php8.4 security update
T  DSA-6087-1 roundcube security update
T  DSA-6086-1 dropbear security update
T  DSA-6085-1 mediawiki security update
T  DSA-6084-1 c-ares security update
T  DSA-6083-1 webkit2gtk security update
T  DSA-6082-1 vlc security update
T  DSA-6081-1 thunderbird security update
T  DSA-6080-1 chromium security update
T  DSA-6079-1 ffmpeg security update
T  DSA-6078-1 firefox-esr security update
T  DSA-6077-1 pdns-recursor security update
T  DSA-6076-1 libpng1.6 security update
T  DSA-6075-1 wordpress security update
T  DSA-6074-1 webkit2gtk security update
T  DSA-6073-1 ffmpeg security update
T  DSA-6072-1 chromium security update
T  DSA-6071-1 unbound security update
T  DSA-6070-1 webkit2gtk security update
T  DSA-6069-1 openvpn security update
T  DSA-6068-1 xen security update
T  DSA-6067-1 containerd security update
T  DSA-6066-1 gnome-shell-extension-gsconnect security update
T  DSA-6065-1 krita security update
T  DSA-6064-1 tryton-server security update
T  DSA-6063-1 kdeconnect security update
T  DSA-6062-1 pdfminer security update
T  DSA-6061-1 tryton-sao security update
T  DSA-6060-1 chromium security update
T  DSA-6059-1 thunderbird security update
T  DSA-6058-1 lasso security update
T  DSA-6057-1 lxd security update
T  DSA-6056-1 keystone security update
T  DSA-6055-1 chromium security update
T  DSA-6054-1 firefox-esr security update
T  DSA-6053-1 linux security update
T  DSA-6052-1 rust-sudo-rs security update
T  DSA-6051-1 incus security update
T  DSA-6050-1 chromium security update
T  DSA-6049-1 gimp security update
T  DSA-6048-1 ruby-rack security update
T  DSA-6047-1 squid security update
T  DSA-6046-1 chromium security update
T  DSA-6045-1 pdns-recursor security update
T  DSA-6044-1 xorg-server security update
T  DSA-6043-1 gimp security update
T  DSA-6042-1 webkit2gtk security update
T  DSA-6041-1 strongswan security update
T  DSA-6040-1 thunderbird security update
T  DSA-6039-1 openjdk-25 security update
T  DSA-6038-1 openjdk-17 security update
T  DSA-6037-1 openjdk-21 security update
T  DSA-6036-1 chromium security update
T  DSA-6035-1 python-internetarchive security update
T  DSA-6034-1 tryton-sao security update
T  DSA-6033-1 bind9 security update
T  DSA-6032-1 request-tracker4 security update
T  DSA-6031-1 request-tracker5 security update
T  DSA-6030-1 intel-microcode security update
T  DSA-6029-1 ark security update
T  DSA-6028-1 lxd security update
T  DSA-6027-1 incus security update

• Debian Security Tracker primary source for all security related information, search options
• JSON list contains CVE description, package name, Debian bug number, package versions with fix, no DSA included
• DSA list contains DSA including date, related CVE's numbers, package versions with fix
• DLA list contains DLA including date, related CVE's numbers, package versions with fix
• DSA announcements (Debian Security Advisories)
• DLA announcements (Debian Security Advisories of Debian LTS)
• RSS of the DSA or RSS long version including the text of the advisory
• RSS of the DLA or RSS long version including the text of the advisory
• Oval files
• Lookup a DSA (uppercase is important)
  e.g.
• Lookup a DLA ( -1 is important)
  e.g.
• Lookup a CVE
  e.g.

Back to the Debian Project homepage.