Security fixes
- DSA-6206-1 gdk-pixbuf for Debian 13 "Trixie" and Debian 12 "Bookworm" . Gdk-pixbuf, the GDK Pixbuf library, does not properly validate color component counts in the JPEG image loader, which may result in the execution of arbitrary code or denial of service if specially crafted JPEG images are processed. Fixed in Trixie
2.42.12+dfsg-4+deb13u1, Bookworm2.42.10+dfsg-1+deb12u4. - DLA-4527-1 inetutils for Debian 11 "Bullseye" . Bugs in inetutils could lead to privilege escalation or information disclosure. Fixed in
2:2.0-1+deb11u4. - DLA-4528-1 webkit2gtk for Debian 11 "Bullseye" . Several security issues in webkit2gtk were fixed. Fixed in
2.50.6-1~deb11u1.
Announcements and releases
- Correction: Delegation changes during DPL transition on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).