Security fixes
- DSA-6112-1 openjdk-21 for Debian 13 "Trixie" . Bugs in openjdk-21 could lead to incorrect certificate validation, CRLF injection or man-in-the-middle attacks. Fixed in
21.0.10+7-1~deb13u1. - DSA-6113-1 openssl for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in openssl could lead to denial of service, information leaks, or potentially remote code execution. Additional details can be found in the upstream advisory: https://openssl-library.org/news/secadv/20260127. Fixed in Trixie
3.5.4-1~deb13u2, Bookworm3.0.18-1~deb12u2.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).