Updated Debian 13: 13.6 released

The Debian project is pleased to announce the sixth update of its stable distribution Debian 13 (codename trixie ). This point release mainly adds corrections for security issues, along with a few adjustments for serious problems. Security advisories have already been published separately and are referenced where available.

Please note that the point release does not constitute a new version of Debian 13 but only updates some of the packages included. There is no need to throw away old trixie media. After installation, packages can be upgraded to the current versions using an up-to-date Debian mirror.

Those who frequently install updates from security.debian.org won't have to update many packages, and most such updates are included in the point release.

New installation images will be available soon at the regular locations.

Upgrading an existing installation to this revision can be achieved by pointing the package management system at one of Debian's many HTTP mirrors. A comprehensive list of mirrors is available at:

fwupd has been updated to upstream version 2.0.20, which has the ability to update the Secure Boot certificate authority (CA), Key Exchange Key (KEK) and revocation (DBX) databases.

The 2013 UEFI Secure Boot CA installed by default on most PCs and used to sign bootloaders has now expired. Future updates to shim-signed could therefore lead to systems being unable to boot with Secure Boot enabled.

Users are strongly advised to apply CA , KEK and DBX updates from their system OEM in line with the following guidance:

For licensing reasons geoip-database has been reverted to a version dated approximately December 2019. As a result, applications using this database might use out-of-date allocation information.

More recent versions of geoip-database (GeoLite) are not compatible with the Debian Free Software Guidelines and cannot be distributed.

Consumers of this data are strongly encouraged to obtain a GeoLite license directly and cease reliance on the geoip-database package.

This stable update adds a few important corrections to the following packages:

This revision adds the following security updates to the stable release. The Security Team has already released an advisory for each of these updates:

The installer has been updated to include the fixes incorporated into stable by the point release.

The complete lists of packages that have changed with this revision:

The current stable distribution:

Proposed updates to the stable distribution:

stable distribution information (release notes, errata etc.):

Security announcements and information:

The Debian Project is an association of Free Software developers who volunteer their time and effort in order to produce the completely free operating system Debian.

For further information, please visit the Debian web pages at , send mail to , or the stable release team at .