Debian 踩坑预警

Nginx CVE-2026-42945，影响版本 0.6.27~1.30.0 https://security-tracker.debian.org/tracker/CVE-2026-42945

bullseye 和 bookworm 的安全频道已分别更新内核版本到5.10.251-3 和6.1.170-1，修复提权漏洞，建议及时更新。

trixie security 已更新内核到版本 6.12.85-1，修复提权漏洞，建议及时更新。

内核提权漏洞 请尽快将内核更新到 linux 6.19.12+ 或等待稳定版安全更新，修复情况参见： https://security-tracker.debian.org/tracker/CVE-2026-31431

PackageKit Debian 12 1.2.6-5+deb12u1 Debian 13 1.3.1-1+deb13u1

https://github.security.telekom.com/2026/04/pack2theroot-linux-local-privilege-escalation.html

kwin-wayland 对 xwaylandvideobridge 的依赖缺失预计会在 KDE 6.6 中修复（指删掉

目前 unstable 的 kde 升级因 xwaylandvideobridge 卡住，建议等等

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1129992

please remove xwaylandvideobridge from unstable. It FTBFS with Qt 6.10 and is abandoned upstream.

Read the changelog? mesa (25.3.0~rc1-1) experimental; urgency=medium ... * control, rules: Drop mesa-vdpau-drivers, VDPAU got removed upstream. and mesa-va-drivers had just symlinks, got merge to mesa-libgallium

mesa-vdpau-drivers removed with upgrade to version 25.3.2-2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123644