The Debian Project has rolled out the eighth update of its stable 12 “Bookworm” series, primarily focusing on improving security and addressing serious bugs across various packages.
For those who regularly update their systems via security.debian.org, this release wonโt necessitate many changes. Most security fixes have already been applied in previous updates, and this release consolidates those improvements.
Debian 12.8 brings fixes to a variety of issues in the stable branch. Here are a few highlights:
- 7zip: Fixed heap buffer overflow in NTFS handler and resolved out-of-bounds read issues.
- ClamAV: Introduced a new upstream release and fixed denial of service and file corruption vulnerabilities.
- OpenSSL: Applied a stable release update, addressing buffer overread issues and out-of-bounds memory access vulnerabilities.
- Glibc: Corrected multiple issues, including a Croatian locale currency update, various buffer-related bugs, and a bug in ungetc() that could cause crashes.
- Linux kernel: The kernel has been updated, bumping the ABI version to 6.1.0-27, and the same applies to signed kernels for amd64, arm64, and i386.
In addition to these fixes, several other packages, such as libvirt, sqlite3, docker.io, and curl, received crucial bug fixes and security patches. Users are encouraged to update to benefit from these enhancements.
Debian 12.8 also incorporates a range of security updates previously released by the Debian Security Team. These updates address vulnerabilities in major packages like Apache2,ย Thunderbird,ย Firefox-esr,ย OpenSSL, andย Chromium.
Once again, keep in mind that Debian 12.8 does not include new versions of the โBookwormโ release; it only fixes bugs and security issues in some packages. So, if youโre already using it, you must run the command below to get your system to the most recent stable version.
sudo apt update && sudo apt upgrade
Code language: Bash (bash)
The release announcement provides in-depth information on all changes. A comprehensive list of all packages that have received updates is availableย here.