Security fixes
- DSA-6131-1 nginx for Debian 13 "Trixie" and Debian 12 "Bookworm" . A security issue was fixed in nginx. Fixed in Trixie
1.26.3-3+deb13u2, Bookworm1.22.1-9+deb12u4. - DSA-6132-1 postgresql-15 for Debian 12 "Bookworm" . Bugs in postgresql-15 could lead to memory disclosure or the execution of arbitrary code. Fixed in
15.16-0+deb12u1. - DSA-6133-1 postgresql-17 for Debian 13 "Trixie" . Bugs in postgresql-17 could lead to memory disclosure or the execution of arbitrary code. Fixed in
17.8-0+deb13u1. - DSA-6130-1 haproxy for Debian 13 "Trixie" . Asim Viladi Oglu Manizada reported that HAProxy, does not properly validate an INITIAL QUIC packet with specially crafted data, which may result in denial of service (process crash). Fixed in
3.0.11-1+deb13u2.
Announcements and releases
- Bits from the DFSG Team: New Dashboard & Queue Processes on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).