FOSSWire
Search/
Distro Planets

Debian developer reports security updates for Caddy, Suricata, and Cyrus SASL2

Brief written by the FOSSWire AI editor from Planet Debian How we write

1 min read

Key Takeaway

Debian LTS/ELTS maintenance includes critical security patches for several core networking and security packages in Bookworm and older releases.

Summary

Debian developer Thorsten Alteholz has detailed his October 2026 activities, highlighting significant security maintenance for the Debian Long Term Support (LTS) and Extended LTS (ELTS) initiatives. The updates focus on addressing multiple vulnerabilities in the Bookworm release, including path traversal, buffer overflows, and access control bypasses.

Beyond security patching, the report covers maintenance across several Debian sub-projects, including Debian Printing, Debian Lomiri, and Debian Mobcom. Notable work includes fixing autopkgtest issues in CUPS and managing a large volume of Osmocom-related package uploads to experimental and unstable repositories.

Security and Maintenance Breakdown

  • Caddy Security (DLA 4857-1): Addresses nine CVEs in Debian Bookworm involving host-based access control bypasses, FastCGI backend file execution, identity header injection, and unauthorized admin API reconfiguration.
  • Networking & Auth Patches: Includes a path traversal fix for suricata-update (DLA 4825-1) and a heap-based buffer overflow fix for cyrus-sasl2 (DLA 4871-1) in Bookworm, with similar fixes backported to Stretch, Buster, and Bullseye via ELTS.
  • Memory Safety Issues: Addresses heap out-of-bounds writes and integer divide-by-zero errors in antiword (DLA 4870-1/ELA-1873-1) and missing overflow checks in libcaca (DLA 1875-1/1876-1).
  • Infrastructure & Printing: Updates CUPS in the unstable branch to resolve autopkgtest failures, supported by Freexian funding.
  • Mobile & Telecom: Executes extensive uploads for the Osmocom project, including osmo-sgsn, osmo-bsc, and osmo-msc, to experimental and unstable repositories.

Why it matters

These updates are critical for system administrators running Debian Bookworm or older LTS/ELTS releases, particularly those using Caddy or Suricata for network security. The maintenance of the Osmocom stack and CUPS ensures stability for specialized telecommunications and printing environments within the Debian ecosystem.

Original reference: blog.alteholz.eu →