Debian DSA-6597-1 updates the dpdk package
Debian has released DSA-6597-1, a security update for the dpdk package. See how to check whether a server runs dpdk and apply the fix.
TL;DR: Debian has published DSA-6597-1, a security update for the dpdk package, so Debian servers that use it should be upgraded.
What happened
The Debian security team announced DSA-6597-1 on October 31, 2026. The notice is a security update for dpdk, the Data Plane Development Kit used for fast packet processing. The announcement points to the Debian security tracker for the list of CVEs and the fixed package versions, so use the tracker for the exact version.
Am I affected?
Only Debian systems with the dpdk package installed are in scope. To check one machine by hand, run dpkg -l | grep -i dpdk, then apt list --upgradable | grep -i dpdk. Apply the update with sudo apt update && sudo apt install --only-upgrade dpdk, and restart any service that uses it.
How to check with Stackurity
Stackurity assesses Debian packages with the distribution's own advisories, so DSA-6597-1 is matched against the installed dpdk package and shows the version to upgrade to. After the upgrade, check again records whether the finding has cleared. See remediation in Stackurity for how upgrade cards work.
Stackurity keeps a live inventory of installed packages through a read-only agent on Linux servers and matches it against new advisories every hour, using each distribution's own version rules so that backports are not reported as false alarms. After an upgrade, check again records whether the issue is really gone. Read how verification works. The core is open source, and Stackurity Cloud offers a 14-day free trial without a card: start a free trial.
