Debian 13.6 Update Addresses Expired Secure Boot Certificates and Security Vulnerabilities

The Debian project released version 13.6 of its stable distribution, addressing over a hundred security advisories. A significant issue is the expiration of the UEFI Secure Boot certificate authority from 2013, which affects many PCs using Secure Boot. The update includes a new version of fwupd, which allows users to update the Secure Boot certificate authority, Key Exchange Key, and revocation databases. Users are advised to apply these updates to avoid boot issues. The update does not constitute a new version of Debian 13 but includes important security corrections and fixes for serious problems. The security team has published advisories for each of the updates included in this release. Users are encouraged to upgrade their installations using Debian mirrors. The point release is primarily focused on security patches rather than new features.

Key Points: • Debian 13.6 addresses over a hundred security advisories, including critical UEFI Secure Boot issues. • The UEFI Secure Boot certificate authority expired in 2026, affecting many systems with Secure Boot enabled. • Users must update their systems with the new fwupd version to prevent boot failures.