Security fixes
- DSA-6195-1 python-tornado for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in python-tornado could lead to denial of service, header injection or cross-site scripting. For the oldstable distribution (bookworm), this problem has been fixed in version 6. Fixed in Trixie
6.4.2-3+deb13u2, Bookworm6.2.0-3+deb12u4. - DSA-6193-1 inetutils for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in inetutils could lead to privilege escalation or information disclosure. Fixed in Trixie
2:2.6-3+deb13u3, Bookworm2:2.4-2+deb12u3. - DSA-6194-1 pyasn1 for Debian 13 "Trixie" and Debian 12 "Bookworm" . Pyasn1, a generic ASN.1 library for Python, is prone to a denial of service vulnerability when decoding ASN.1 data with deeply nested structures. For the oldstable distribution (bookworm), this problem has been fixed in version 0. Fixed in Trixie
0.6.1-1+deb13u2, Bookworm0.4.8-3+deb12u2.
Announcements and releases
- Debian Project Leader election 2026: First call for votes on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).