Security fixes
- DSA-6100-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
144.0.7559.59-1~deb13u1, Bookworm144.0.7559.59-1~deb12u1. - DLA-4437-1 gnupg2 for Debian 11 "Bullseye" . Bugs in gnupg2 were fixed. There exist memory corruptions in the armor parsing code of GnuPG that can be exploited to provide primitives like out of bounds buffer read and write. Fixed in
2.2.27-2+deb11u3. - DLA-4438-1 mongo-c-driver for Debian 11 "Bullseye" . A security issue was fixed in mongo-c-driver. Fixed in
1.17.6-1+deb11u2. - DSA-6099-1 python-parsl for Debian 13 "Trixie" . Viral Vaghela discovered an SQL injection vulnerability in Parsl, a parallel scripting library for Python. Fixed in
2025.01.13+ds-1+deb13u1. - DLA-4436-1 linux-6.1 for Debian 11 "Bullseye" . Bugs in linux-6.1 could lead to a privilege escalation, denial of service or information leaks. Fixed in
6.1.159-1~deb11u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).