Debian Project releases Debian 13.7 with 107 security updates

The Debian Project has released Debian 13.7, the seventh point release for the stable ‘Trixie’ series. This maintenance update consolidates 107 security updates and 106 bug fixes into a single release.

Key technical changes include an upgrade of the Kernel ABI to version 6.12.107, which is also utilized by the Debian Installer. The release addresses numerous vulnerabilities across critical software, including over 20 security flaws in QEMU that could allow for VM escapes or Secure Boot bypasses. Other significant patches were applied to ImageMagick, wolfssl, mbedTLS, and the GNU C Library (glibc).

The glibc updates specifically address buffer overflow and underflow vulnerabilities while ensuring compatibility with Linux 7.0 headers. This necessitated the rebuilding of approximately two dozen core packages, such as bash, docker.io, and gnupg2. Additionally, the update provides support for the RISC-V 64-bit architecture in the audit package and includes fixes for desktop environments like Cinnamon.