Topics
debian
Debian Ships Symfony Security Update Fixing Sixteen CVEs
Debian issued DSA-6617-1 for the symfony PHP framework on November 9, 2026, lifting the package in trixie from 6.4.41+dfsg-0+deb13u1 to 6.4.50+dfsg-0+deb13u1 to address sixteen tracked vulnerabilities.
APT Flaw (CVE-2026-109518) Lets On-Path Attacker Run Code as Root During Package Installs
A high-severity APT flaw (CVE-2026-109518, CVSS 7.7) lets an on-path attacker swap verified packages and run code as root on Debian 12+ and Ubuntu 22.04+ defaults. Fixed builds are out for all supported Ubuntu releases.
Ubuntu 24.10 and Debian 13 Trixie to Feature New CLI
The APT 3.0 package manager is getting a completely revamped UI with columnar display, support for colors, and much more.