Debian 13.6 Update Addresses Expired Secure Boot Certificate and Security Vulnerabilities

On July 11, 2026, Debian released version 13.6 of its stable distribution 'trixie,' addressing over a hundred security advisories, including critical vulnerabilities. A significant focus of this update is the expiration of a UEFI Secure Boot certificate authority from 2013, which could lead to boot failures on affected systems. To mitigate this, fwupd has been updated to version 2.0.20, allowing the refresh of the Key Exchange Key and revocation databases. Users are advised to apply updates to ensure continued system bootability with Secure Boot enabled. The update also includes security fixes for various packages, including Linux, Apache, Curl, and QEMU. Debian recommends that users upgrade their installations to the latest versions available from official mirrors. The update does not constitute a new version of Debian but is crucial for maintaining system security and functionality.

Key Points: • Debian 13.6 addresses the expiration of a UEFI Secure Boot certificate authority. • The update includes security fixes for over a hundred vulnerabilities across multiple packages. • Users are urged to apply updates to prevent potential boot failures with Secure Boot enabled.