debian

The window Julian Andres Klode set for APT's hard Rust dependency has arrived, but no Rust code has landed in APT yet and alpha, hppa, m68k, and sh4 still lack toolchains.

Debian's release team has switched on a migration block for any package that fails to build reproducibly, with 98.29% of architecture-independent packages already passing.

An integer overflow in PgBouncer's SCRAM packet parser lets unauthenticated attackers crash the pooler, and three more flaws ship in the same release. Debian stable, testing, and pre-release archives are all still vulnerable.

Raspberry Pi OS 6.2 tightens security by requiring a password for sudo commands on new installations and replaces PulseAudio with PipeWire across the desktop stack.