Security fixes
- DSA-6149-1 nss for Debian 13 "Trixie" and Debian 12 "Bookworm" . Clay Ver Valen discovered an integer overflow in the AES-GCM implementation of the Mozilla Network Security Service libraries. For the oldstable distribution (bookworm), this problem has been fixed in version 2:3. Fixed in Trixie
2:3.110-1+deb13u1, Bookworm2:3.87.1-1+deb12u2. - DLA-4493-1 libstb for Debian 11 "Bullseye" . Bugs in libstb were fixed. Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h. Fixed in
0.0~git20200713.b42009b+ds-1+deb11u1. - DSA-6150-1 python-django for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in python-django could lead to denial of service, information disclosure or SQL injection. Fixed in Trixie
3:4.2.28-0+deb13u1, Bookworm3:3.2.25-0+deb12u2. - DSA-6151-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
145.0.7632.116-1~deb13u1, Bookworm145.0.7632.116-1~deb12u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Q4OS releases its Andromeda Windows installer. On February 26, the Debian-based Q4OS project announced the first stable Windows installer for Q4OS 6 Andromeda. It installs alongside Windows in a regular folder without repartitioning and includes Secure Boot support; this is a Q4OS tool, not an official Debian release. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).