Debian 13.7 ships the fixes behind 92 security advisories, updates 106 packages

The Debian project has released version 13.7, codenamed "trixie," which incorporates 92 previously published security advisories and corrections for 106 source packages. This point release addresses significant vulnerabilities in key components such as QEMU, which includes 25 fixed issues including a secure boot bypass (CVE-2026-16288), and ImageMagick, with 24 fixes. Other notable updates include patches for glibc buffer overflows (CVE-2026-5928, CVE-2026-5450) and u-boot FIT image verification flaws (CVE-2026-46728).

Existing systems should update their package managers to fetch these security improvements, while new installations from the updated media will include these fixes by default.