Security fixes
- DSA-6146-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
145.0.7632.109-1~deb13u3, Bookworm145.0.7632.109-1~deb12u3. - DSA-6147-1 pillow for Debian 13 "Trixie" . Yarden Porat discovered that missing input sanitising in the PSD support of Pillow, could result in denial of service or the execution of arbitrary code if malformed images are processed. The oldstable distribution (bookworm) is not affected. Fixed in
11.1.0-5+deb13u1. - DLA-4485-1 ca-certificates for Debian 11 "Bullseye" . The Mozilla CA certificate bundle shipped in ca-certificates was updated to version 2.60. Fixed in
20230311+deb12u1~deb11u1. - DLA-4486-1 nova for Debian 11 "Bullseye" . Bugs in nova could lead to unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image backend are affected. Fixed in
2:22.4.0-1~deb11u7.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).