- Forums
- Product Forums
- General Purpose MicrocontrollersGeneral Purpose Microcontrollers
- i.MX Forumsi.MX Forums
- QorIQ Processing PlatformsQorIQ Processing Platforms
- Identification and SecurityIdentification and Security
- Power ManagementPower Management
- Wireless ConnectivityWireless Connectivity
- RFID / NFCRFID / NFC
- Advanced AnalogAdvanced Analog
- Neural Processing UnitsNeural Processing Units
- MCX Microcontrollers
- S32G
- S32K
- S32V
- MPC5xxx
- Other NXP Products
- S12 / MagniV Microcontrollers
- Powertrain and Electrification Analog Drivers
- Sensors
- Vybrid Processors
- Digital Signal Controllers
- 8-bit Microcontrollers
- ColdFire/68K Microcontrollers and Processors
- PowerQUICC Processors
- OSBDM and TBDML
- S32M
- S32Z/E
-
- Solution Forums
- Software Forums
- MCUXpresso Software and ToolsMCUXpresso Software and Tools
- CodeWarriorCodeWarrior
- MQX Software SolutionsMQX Software Solutions
- Model-Based Design Toolbox (MBDT)Model-Based Design Toolbox (MBDT)
- FreeMASTER
- eIQ Machine Learning Software
- Embedded Software and Tools Clinic
- S32 SDK
- S32 Design Studio
- GUI Guider
- Zephyr Project
- Voice Technology
- Application Software Packs
- Secure Provisioning SDK (SPSDK)
- Processor Expert Software
- Generative AI & LLMs
-
- Topics
- Mobile Robotics - Drones and RoversMobile Robotics - Drones and Rovers
- NXP Training ContentNXP Training Content
- University ProgramsUniversity Programs
- Rapid IoT
- NXP Designs
- SafeAssure-Community
- OSS Security & Maintenance
- Using Our Community
-
- Cloud Lab Forums
-
- Knowledge Bases
- ARM Microcontrollers
- i.MX Processors
- Identification and Security
- Model-Based Design Toolbox (MBDT)
- QorIQ Processing Platforms
- S32 Automotive Processing Platform
- Wireless Connectivity
- CodeWarrior
- MCUXpresso Suite of Software and Tools
- MQX Software Solutions
- RFID / NFC
- Advanced Analog
- Neural Processing Units
-
- NXP Tech Blogs
- Home
- :
- Translated Content
- :
- Multi Source Translation Content
- :
- 2390047_en-US
2390047_en-US
- Subscribe to RSS Feed
- Mark as New
- Mark as Read
- Bookmark
- Subscribe
- Printer Friendly Page
- Report Inappropriate Content
2390047_en-US
2390047_en-US
Hello NXP team,
We are using the NXP Debian Linux SDK on an i.MX8MP-based custom board.
According to UG10155 Debian Linux SDK User Guide, our understanding is that the SDK is Debian-based: the RootFS mainly uses standard Debian .deb packages, while NXP / board-specific components and configurations are integrated by the SDK.
We also referred to the NXP Community article “Debian 12 Installation Guide for iMX8MM, iMX8MP, iMX8MN and iMX93”. In that article, the apt configuration example includes Debian security and update repositories for Debian 12 / bookworm.
On our current Debian 13 / trixie-based system, /etc/apt/sources.list only contains the following entry:
deb http://deb.debian.org/debian trixie main contrib
We would like to clarify the expected security update model for the NXP Debian Linux SDK.
Could you please help confirm the following points?
1. For the NXP Debian Linux SDK based on Debian 13 / trixie, is the current APT source configuration expected, or is it recommended to also add the Debian security and update repositories?
For example:
deb http://deb.debian.org/debian trixie main contrib
deb http://deb.debian.org/debian trixie-updates main contrib
deb http://security.debian.org/ trixie-security main contrib
2. For NXP / BSP / board-specific components, such as the kernel, U-Boot, ATF, OP-TEE, DTB, peripheral firmware, and NXP-specific driver components, what is the recommended security update procedure? Does NXP provide security advisories, patches, or SDK updates for these components?
We would like to confirm this so that we can provide accurate security maintenance guidance to our customer.
Thank you.
Hi @Leo_dev
Currently, the SDK defaults to only including “trixie main contrib,” which is normal (for evaluation and guided installation), but this is not the final production configuration. If you need, you can use below sources.
deb http://deb.debian.org/debian trixie main contrib
deb http://deb.debian.org/debian trixie-updates main contrib
deb http://security.debian.org/debian-security trixie-security main contribFor components provided by NXP, you can update to the latest version by modifying the source code tag in flexbuild individually.
Best Regards,
Zhiming