33 Debian LTS Advisories fixing 216 CVEs for various packages were released by Debian LTS contributors in January 2026. These include notable security updates for python 3.9, django 2.2.28, php 7.4, apache2, ceph, Linux 6.1 kernel and more.
A study into the security status report of p7zip, which is unmaintained upstream, was also done last month in addition to updates contributed for recent releases of Debian 12, Debian 13 and to Debian unstable.
Read the full report at https://www.freexian.com/blog/debian-lts-report-2026-01/?utm_source=mastodon&utm_medium=social
This work is funded through Freexian’s Debian LTS offering. Consider sponsoring Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) to support this effort and benefit from it: https://www.freexian.com/lts/debian/details#benefits
Monthly report about Debian Long Term Support, January 2026
The Debian LTS Team, funded by Freexian’s Debian LTS offering, is pleased to report its activities for January. Activity summary During the month of January, 20 contributors have been paid to work on Debian LTS (links to individual contributor reports are located below). The team released 33 DLAs fixing 216 CVEs. The team continued preparing security updates in its usual rhythm. Beyond the updates targeting Debian 11 (“bullseye”), which is the current release under LTS, the team also proposed updates for more recent releases (Debian 12 (“bookworm”) and Debian 13 (“trixie”)), including Debian unstable.

