Debian GNU/Linux dapat diinstalasi dari aneka media seperti DVDs, CDs, USB sticks dan disket, atau melalui jaringan (netinstall). GNOME merupakan lingkungan desktop terpasang by default direkam di CD pertama, sementara K Desktop Environment (KDE) dan Xfce desktop dapat diinstalasi dari dua CD alternatif. Kini tersedia bersama Debian GNU/Linux 4.0 baik dalam CDs maupun DVDs multi-arch yang mendukung instalasi untuk beragam arsitektur dari sebuah cakram tunggal.
Rilis ini mengemas paket-paket software yang diaktualisasi termasuk K Desktop Environment 3.5 (KDE), versi 2.14 dari lingkungan desktop GNOME, Xfce 4.4, GNUstep desktop 5.2, X.Org 7.1, OpenOffice.org 2.0.4a, GIMP 2.2.13, Iceweasel (versi Mozilla Firefox 2.0.0.3 yang diganti namanya), Icedove (untuk versi Mozilla Thunderbird 1.5), Iceape (untuk versi Mozilla Seamonkey 1.0.8), PostgreSQL 8.1.8, MySQL 5.0.32, GNU Compiler Collection 4.1.1, Linux kernel versi 2.6.18, Apache 2.2.3, Samba 3.0.24, Python 2.4.4 and 2.5, Perl 5.8.8, PHP 4.4.4 and 5.2.0, Asterisk 1.2.13, dan lebih dari 18 ribu paket-paket software siap pakai lainnya.
In addition to correcting several security problems and a few serious defects in the stable release, for the first time in Debian's history an update for a stable distribution also adds support for newer hardware by giving users the option to install newer drivers. Existing Debian GNU/Linux 4.0 installation CDs and DVDs can continue to be used to install this update. After installation, upgrading via an up-to-date Debian mirror will cause any out of date packages to be updated. However, users of the network-console installation method are strongly encouraged to update their media, see the "Debian Installer" portion of this announcement for more information. Those who install updates frequently from security.debian.org won't have to update many packages and most updates from security.debian.org are included in this update. Read the rest of the release announcement for a detailed list of all changes.
Debian GNU/Linux 4.0 release 9:
This oldstable update adds a few important corrections to the following packages: Package Reason
backup-manager Fix disclosure of MySQL passwords to local users
binutils Add mips support for ".set symbol,value" gas syntax
fam Fix 100% CPU usage in famd
fetchmail Fix potential MITM against APOP and potential DoS
freedoom Remove copyright-violating material
glibc Fix incorrect libc6-amd64 dependency
gnupg Fix memory leak and cleanup terminal on interrupt
irssi Fix out of bounds access
kazehakase Disallow adding bookmarks for data:/javascript: URIs
linux-2.6 Several vulnerabilities
linux-2.6.24 Several vulnerabilities
mksh Fix unauthenticated local privilege escalation
mt-daapd Update the embedded prototype.js to fix security issues
openafs Don't create invalid pointers to kernel memory when handling errors
openssl Deprecate MD2 hash signatures and fix several DoS vulnerabilities
serveez Fix remote buffer overflow
tetex-bin Don't fail when LaTeX is more than five years old
texlive-bin Don't fail when LaTeX is more than five years old
texlive-extra Don't fail when LaTeX is more than five years old
texlive-lang Don't fail when LaTeX is more than five years old
wordpress Fix DoS via long title and specially constructed charset parameter
xcftools Fix crash with files containing negative co-ordinates