The Debian project has released Debian 13.6, the sixth maintenance update for the stable "Trixie" branch . This release is not a new version of the operating system, but rather an update of the packages included in the installation media, with particular attention to security fixes and the resolution of critical bugs. Those already using Debian 13 and keeping their system updated via APT do not need to download the new image, as the accumulated updates cover exactly the same issues.
However, for those performing a clean installation, Debian 13.6 ISO images are the recommended option , as they include all patches released to date and reduce the time and bandwidth required to update the system. Version 13.0 was released in August 2025 and will have at least five years of support, until 2030, so this update reinforces the stability and security of one of the most widely used distributions in servers and professional environments.
Security fixes and key new features
Debian 13.6 includes 124 bug fixes and 120 security updates that had already been distributed through the official repositories. Among the affected packages are Apache, curl, GIMP, OpenStack, Linux, NGINX, PHP, Chromium, Thunderbird, OpenVPN, Xorg Server, Tor, and many other critical components. The goal is to maintain Debian's stable philosophy: to offer a robust and predictable platform without introducing changes that could break compatibility with existing software.
One of the most significant updates affects Secure Boot and the fwupd firmware manager . Version 2.0.20 of fwupd includes the ability to renew the CA, KEK, and DBX certificate databases, an important step after the 2013 UEFI certificate authority, used to sign bootloaders, expired. Debian recommends applying updates provided by the hardware manufacturer and, on critical servers, performing preliminary testing in a similar environment before modifying shims or the UEFI databases.
Geolocation: a step back to 2019 levels due to licensing
Another unexpected change in Debian 13.6 is the rollback of the geoip-database package to an approximate December 2019 version . This decision stems from a change in the licensing terms for the most recent data, prioritizing legal compliance. As a result, applications that rely on this database may be using outdated geolocation information. Debian recommends that those requiring recent GeoLite data obtain a license directly from the vendor. For the average user, this may result in reduced accuracy in geolocation services, although system security remains unaffected.
How to update or install Debian 13.6
If you already have Debian 13 "Trixie" installed, The update process is the usual one using APT.: executes sudo apt update && sudo apt full-upgrade And, if the kernel has been updated, it restarts the system. There's no need to reinstall or download new images. For fresh installations, Debian 13.6.0 ISO images are already available on the official download page, including the netinst version, DVD images, Live with different desktop environments (GNOME 48, KDE Plasma 6.3, Xfce 4.20), and options for architectures such as 64-bit RISC-V.
In enterprise environments, it is recommended to follow best practices before updating servers : perform a verifiable backup, check free disk space, review changes to sensitive packages (kernel, OpenSSH, web servers, databases), and apply the update first in a test environment. Debian Stable is one of the most widely used server distributions due to its reliability, but any firmware or critical component update requires prior validation.
Finally, it's worth remembering that Debian 13.6 is not a new major version, but a cumulative update that maintains the Linux 6.12 LTS kernel, GCC 14.2, OpenSSL 3.5, systemd 257, and the other components that were already part of Trixie. The distribution remains the recommended choice for those seeking a free, stable operating system with a long support lifecycle, for both desktop and server use.