Security fixes
- DLA-4467-1 containerd for Debian 11 "Bullseye" . Bugs in containerd were fixed. g. Docker or Kubernetes. Fixed in
1.4.13~ds1-1~deb11u6. - DLA-4468-1 tomcat9 for Debian 11 "Bullseye" . Bugs in tomcat9 could lead to a bypass of security constraints or a denial of service. Fixed in
9.0.107-0+deb11u2. - DSA-6119-1 openjdk-25 for Debian 13 "Trixie" . Bugs in openjdk-25 could lead to incorrect certificate validation, CRLF injection or man-in-the-middle attacks. Fixed in
25.0.2+10-1~deb13u2. - DSA-6120-1 tomcat10 for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in tomcat10 could lead to uncontrolled resource consumption and a denial of service. Fixed in Trixie
10.1.52-1~deb13u1, Bookworm10.1.52-1~deb12u1. - DSA-6121-1 tomcat11 for Debian 13 "Trixie" . Bugs in tomcat11 could lead to uncontrolled resource consumption and a denial of service. Fixed in
11.0.15-1~deb13u1. - DSA-6122-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
144.0.7559.109-2~deb13u1, Bookworm144.0.7559.109-2~deb12u1. - DLA-4469-1 alsa-lib for Debian 11 "Bullseye" . A buffer overflow in the alsa-lib package can lead to a crash when a topology file (.tplg) has an excessive num_channels value. The alsa-lib package contains libraries and tools to interface with ALSA, the Advanced Linux Sound Architecture. Fixed in
1.2.4-1.1+deb11u1.
Announcements and releases
- bits from the ci.debian.net operators on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).