Security fixes
- DSA-6125-1 usbmuxd for Debian 13 "Trixie" and Debian 12 "Bookworm" . Security issues in usbmuxd were fixed. Fixed in Trixie
1.1.1-6+deb13u1, Bookworm1.1.1-2+deb12u1. - DLA-4474-1 rlottie for Debian 11 "Bullseye" . Bugs in rlottie were fixed. Most of these CVEs have been already fixed by Fix-crash-on-invalid-data.patch in a previous upload. Fixed in
0.1+dfsg-2+deb11u1. - DSA-6126-1 linux for Debian 13 "Trixie" . Bugs in linux could lead to a privilege escalation, denial of service or information leaks. Fixed in
6.12.69-1. - DSA-6127-1 linux for Debian 12 "Bookworm" . Bugs in linux could lead to a privilege escalation, denial of service or information leaks. 1.162-1. Fixed in
6.1.162-1. - DSA-6128-1 shaarli for Debian 13 "Trixie" and Debian 12 "Bookworm" . Moritz Woermann discovered that missing input sanitising in Shaarli, could result in cross-site scripting. For the oldstable distribution (bookworm), this problem has been fixed in version 0. Fixed in Trixie
0.14.0+dfsg-2+deb13u1, Bookworm0.12.1+dfsg-8+deb12u2.
Announcements and releases
- tag2upload general availability on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).