There are 363 open security issues in trixie.
There are 22 open security issues in sid.
There are 34 open security issues in forky.
There are 1450 open security issues in bullseye.
There are 793 open security issues in bookworm.
You can find information about how to handle these issues in the security team's documentation.
There are 636 open security issues in buster.
commit 0e6a187b3763eecef98279bdb177979d29cdb930
Merge: 2f7e224e1 64f7eb3c4
Author: Uwe Kleine-König <ukleinek@debian.org>
Date: Thu Apr 16 08:26:51 2026 +0200
Merge branch 'cix-orion-o6' of salsa.debian.org:ysk/linux
As of now the cix device trees don't have the needed bits to make use of
the GPIO driver, but this support is currently waiting in linux-next to
be merged into v7.1-rc1. Later on we probably want to also enable
RESET_SKY1.
See merge request kernel-team/linux!1858
commit 2f7e224e1dc7124d044a7ad239aff5879d2d800d
Merge: ff870dcce f22388393
Author: Bastian Blank <waldi@debian.org>
Date: Wed Apr 15 19:58:35 2026 +0000
Merge branch 'build-fixes' into 'debian/latest'
Fix FTBFS on several architectures
See merge request kernel-team/linux!1880
commit f223883933adb0bc132300b801ccd225d2b3eaf4
Author: Ben Hutchings <benh@debian.org>
Date: Tue Apr 14 18:07:53 2026 +0200
perf: Disable Rust test case (fixes FTBFS on armhf and loong64)
rustc takes a --target <teiplet> option to specify the host
architecture, rather than having multiple front-end commands with
prefixes.
perf's Makefile.config does its own mapping of kernel architecture to
triplets to pass to rustc, which is incomplete and in any case can't
be correct because the actual mapping is not one-to-one.
Since perf's Rust support is currently limited to a single test case,
disable it for now. This can be revisited if perf adds features
implemented in Rust.
commit 8874b9857c8cf982b6f6fa4f2caf24f81e3cc1c0
Author: Ben Hutchings <benh@debian.org>
Date: Tue Apr 14 17:20:55 2026 +0200
kernel-wedge: copy-modules: Tighten parsing of depmod output
In an arm64 build, the depmod output includes:
cuse cuse c10:203
autofs4 autofs c10:235
btrfs btrfs-control c10:234
loop loop-control c10:237
tun net/tun c10:200
ppp_generic ppp c108:0
uinput uinput c10:223
dm_mod mapper/control c10:236
uhid uhid c10:239
vfio vfio/vfio c10:196
vhost_net vhost-net c10:238
vhost_vsock vhost-vsock c10:241
snd_timer snd/timer c116:33
snd_seq snd/seq c116:1
rfkill rfkill c10:242
These are dependencies of character devices on modules, not between
modules. I can also reproduce this in a non-minimal amd64
environment, but not in a build chroot.
I think that these lines were somehow implicitly ignored by the
previous shell implementation of copy-modules.
Change the parsing of depmod output to:
1. Stop handling continuation lines. kmod doesn't generate them
and handling them properly would complicate the other changes.
2. Only treat lines where the first word ends in a colon as module
dependencies.
3. Report a warning for all lines that don't match this and aren't
otherwise in a recognised format.
This fixes FTBFS on arm64 and maybe other architectures.
Fixes: 40f4fc2c0249 ("kernel-wedge: Rewrite copy-files in Perl")
commit fc61e8f440451a247998ee7a523bfae0a02d7790
Author: Ben Hutchings <benh@debian.org>
Date: Tue Apr 14 16:08:56 2026 +0200
[s390x] net: Enable PPP etc. as modules (fixes FTBFS)
I mistakenly enabled building ppp-modules for s390x although
CONFIG_PPP is disabled there.
Since PPP is not hardware-dependent and there isn't an obvious reason
to disable it on s390x, enable it there rather than disabling
ppp-modules again.
Fixes: 22cc20aef5a0 ("udeb: Build {jfs,loop,ppp,squashfs,uinput,xfs}-modules everywhere we can")
commit f9350579c7cc7907ed997940cb4799c52a143da3
Author: Ben Hutchings <benh@debian.org>
Date: Tue Apr 14 15:13:10 2026 +0200
[ppc64*] udeb: Fix module list inclusion for scsi-modules (fixes FTBFS)
In commit f0b362f7f8d9 I deleted d/i/modules/powerpc/scsi-modules as
redundant, because it did nothing but include <scsi-modules>.
However, d/i/modules/ppc64/scsi-modules included the former and makes
further adjustments to the module list, so it needs to be changed to
include <scsi-modules> instead.
Fixes: f0b362f7f8d9 ("kernel-wedge, udeb: Define which packages to build through package-list")
commit ff870dccefe7d5de57366b0ba66faa636108be06
Author: Salvatore Bonaccorso <carnil@debian.org>
Date: Tue Apr 14 20:09:30 2026 +0200
Add changelog entry for CONFIG_ZSWAP enablement
Gbp-Dch: Ignore
commit 2afc2de88888db6578ef2bf9ab91c294c99b6b16
Merge: a7b592275 023f30117
Author: Bastian Blank <waldi@debian.org>
Date: Tue Apr 14 17:20:04 2026 +0000
Merge branch 'debian/latest' into 'debian/latest'
cloud: Enable CONFIG_ZSWAP
See merge request kernel-team/linux!1873
commit a7b592275cbb69d0b67d539ecb941d9b369018e8
Merge: fe23e4996 caec6074d
Author: Salvatore Bonaccorso <carnil@debian.org>
Date: Tue Apr 14 17:14:28 2026 +0200
Merge branch 'yt6801' into 'debian/latest'
[amd64] drivers/net/ethernet/stmicro: Enable DWMAC_MOTORCOMM as module
See merge request kernel-team/linux!1879
commit caec6074d8fbe011c574580301d7aad0d50a8abf
Author: Helmut Grohne <helmut@subdivi.de>
Date: Tue Apr 14 15:14:31 2026 +0200
[amd64] drivers/net/ethernet/stmicro: Enable DWMAC_MOTORCOMM as module
This driver is needed for YT6801 as used in several Uniwill laptops such
as the ones manufactured by Tuxedo.
commit 023f30117397bb049e507240d838c6c430a32ea3
Author: Noah Meyerhans <nmeyerhans@linux.microsoft.com>
Date: Thu Apr 9 15:02:36 2026 -0400
cloud: Enable CONFIG_ZSWAP
Closes: #1132098
commit 64f7eb3c49a727bf59995a32738ab0609ea7eb0e
Author: Yunseong Kim <ysk@kzalloc.com>
Date: Tue Mar 24 17:53:45 2026 +0000
[arm64] Enable CIX Radxa Orion O6 platforms
Enable the necessary Kconfig symbols to support the CIX Radxa Orion O6
platform on arm64. (bug #1131772)
The following configurations are enabled to support the SoC architecture,
PCIe controller, and pin control hardware:
- ARCH_CIX: Main SoC architecture support
- PCI_SKY1_HOST: PCI Express host controller support
- PINCTRL_SKY1: Pinctrl driver support
- GPIO_CADENCE: Cadence GPIO controller provides GPIO support
Signed-off-by: Yunseong Kim <ysk@kzalloc.com>
Among the 79 debian patches available in version 6.19.12-1 of the package, we noticed the following issues: