Security fixes
- DLA-4494-1 orthanc for Debian 11 "Bullseye" . Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access. Fixed in
1.9.2+really1.9.1+dfsg-1+deb11u2. - DLA-4495-1 thunderbird for Debian 11 "Bullseye" . Bugs in thunderbird could lead to the execution of arbitrary code or information disclosure. Fixed in
1:140.8.0esr-1~deb11u1. - DSA-6152-1 thunderbird for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in thunderbird could lead to the execution of arbitrary code or information disclosure. Fixed in Trixie
1:140.8.0esr-1~deb13u1, Bookworm1:140.8.0esr-1~deb12u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).