Wiki

• FrontPage
• RecentChanges
• FindPage
• HelpContents
• Gnome/TrixieUpdates

References

• https://release.debian.org/proposed-updates/stable.html

• Debian Developer's Reference for stable updates

• https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=release.debian.org

• https://people.debian.org/~fpeters/gnome/debian-gnome-48-status.html

• https://release.gnome.org/calendar/

• Ubuntu has test plans for many GNOME packages that are used for Ubuntu Stable Release Updates and can be used to verify Debian updates

Intentionally skipped

• blueprint-compiler 0.18 (perhaps a toolchain package although not currently on that list)

• deja-dup 48 (too many changes since 45)

• enchant-2 2.8.11 (too many micro releases missed since 2.8.2)

• gdm3 1107682 !28 - not a priority for trixie, let's defer to forky

• gi-docgen 2025.4

• gjs 1.84.x

• gnome-desktop with change of zh_HK default IM, 1107525 - no feedback from Chinese l10n team

• gnome-software 48.4 (all changes were already included in 48.3-2)

• gucharmap 16 (requires a unicode-data 16 transition)

• gupnp-av 0.14.4 (swaps documentation build system, needs repacking to drop vendored fonts)

• pango1.0 1.56.4 (!8) (pango sometimes has subtle regressions in micro releases so we should be extra-careful with this one)

• pygobject 3.52.x (1099164)

• tinysparql 3.9.x

• tracker-miners 3.9.x

• yelp 42.3 (swaps build system, CVE-2025-3155 was already fixed as a patch)

• yelp-xsl 42.x (swaps build system, CVE-2025-3155 was already fixed as a patch)

To be evaluated for risk vs benefit tradeoff

Core packages:

• at-spi2-core 2.56.3, 2.56.4, 2.56.5, 2.56.6, 2.56.7

• gnome-control-center 48.5

• gnome-online-accounts 3.54.6, 3.54.7, 3.54.8

• gnome-remote-desktop 48.2

• gnome-user-docs 48.5

• libadwaita-1 1.7.7, 1.7.8, 1.7.9

• orca 48.6, 48.7

  • updated via backports instead

• gnome-console 48.1 (translations, not core for Debian)

• gnome-music 48.1, 48.2, 48.3

• gnome-remote-desktop 48.3 (Nvidia fix)

• gnome-software 48.4

• sysprof 48.1

Multimedia:

• grilo 0.3.17, .18, .19

• grilo-plugins 0.3.17, .18

• gupnp 1.6.9 !2

Other key packages:

• gexiv2 0.14.6 !3

• glycin 1.2.2, 1.2.3, 1.2.4

Extras/addons (unlikely to be prioritized for team uploads):

• gnome-builder 48.1, 48.2

• gnome-commander 1.18.3

• gnome-recipes 1123534

• gnote 48.1, 48.2

  • not a key package for GNOME, but is a key package for Cinnamon

• jsonrpc-glib 3.44.2

• libdex 0.10.1

• libgom 0.5.4

• mm-common 1.0.7

• secrets 1.11.1

Deferred for a later update

• None

User requests

• evince 1127562

• gtk+3.0 1136797

• gnome-control-center 1129242

To do

• baobab (fix right click operations) 1111360

• evolution-ews 3.56.2

  • If we cherry-pick the fix for 1112131, maybe the bug reporter can test the update for us

• nautilus 48.5

• vte2.91 0.80.4

In progress

• gnome-shell 48.8 (requires mutter 48.8) !121

• mutter 48.8 !166

• papers 48.6 -werdahias

Help wanted

• libproxy 0.5.10

  • Looks like a good update but needs to be tested

• gnome-shell-extensions 48.3 (in unstable)

  • Untested, should be tested by a gnome-classic user

• gnome-user-share 48.1, 48.2

  • This is mostly a translations update so we don't expect anything to break

  • But we still should test on trixie. This package powers Settings > Sharing > File Sharing so just make sure the options there work

Needs more information from bug submitter

• none

Prereleases available for testing

• none

Prereleases waiting for RT ack

https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=release.debian.org

• yaru-theme 1120085

Accepted by RT for inclusion in 13.6 point release

https://release.debian.org/proposed-updates/stable.html

• (none)

Accepted by RT for inclusion in 13.5 point release

• glib2.0 1128227

• phosh 1132011

• gvfs 1132174

Released in 13.4

• flatpak 1126373

• gegl CVE-2026-2049 CVE-2026-2050

• gimp CVE-2025-15059 CVE-2026-2239 CVE-2026-2271 CVE-2026-2272 CVE-2026-0797 CVE-2026-2044 CVE-2026-2045 CVE-2026-2047 CVE-2026-2048

• gnome-shell !114 1127370

• The Debian Live GNOME image has fewer language related apps included, making it appear more similar to the Debian net installer. We still recommend using the Debian net installer to install Debian GNOME, but this provides an improved experience for people who use the live installer instead. live-build !467

Released in 13.3

• at-spi2-core (keyboard layout detection for screen reader) 1111485

• flatpak 1123776

• gimp CVE-2025-14422, CVE-2025-14423, CVE-2025-14424, CVE-2025-14425

• glib2.0 CVE-2025-13601, CVE-2025-14087 1122373

• gnome-shell 48.5, 48.6, 48.7 1122371

  • !111

• mutter 48.5, 48.6, 48.7 1122372

  • !62

• gnome-shell-extension-gsconnect CVE-2025-66270

• webkit2gtk 2.50.4

Released in 13.2

• epiphany-browser 48.5 1119288

• evolution-data-server 3.56.2 1120148

• evolution 3.56.2 1120151

• evolution (compatibility with webkit2gtk 2.50)

• fonts-noto-color-emoji 2.051 (Unicode 17.0) 1119286

• gnome-maps 48.7 1119291

• gnome-session (app priority fixes) 1116012

• malcontent (Flatpak and snap filtering fixes) 1120143

• poppler (low priority security update) 1120048

• wike (compatibility update) 1120048

• xorg (fix GNOME Classic on Xorg) 1120345

• gegl (security update)

• gimp (security update)

• webkit2gtk 2.50 (security update)

Released in 13.1

• glib2.0 1111470

• gnome-control-center 48.4 1111602

• gnome-online-accounts 3.54.5 1111675

• gnome-shell 48.4 1111603

• gssdp 1.6.4 1111684

• libadwaita-1 1.7.6 1111860

• mozjs128 128.14 1111672

• ptyxis 48.5 1111604

• sound-theme-freedesktop 1111608

• webkit2gtk 2.48.5