Security fixes
- DSA-6231-1 openjdk-21 for Debian 13 "Trixie" . Bugs in openjdk-21 could lead to incorrect generation of cryptographic keys, denial of service, information disclosure, XEE/XEE attacks or incorrect validation of Kerberos credentials. Fixed in
21.0.11+10-1~deb13u2. - DLA-4551-1 mbedtls for Debian 11 "Bullseye" . Observable Timing Discrepancy. The presence of a padding error could leak through timings, enabling the attacker to recover information about the secret. Fixed in
2.16.9-0.1+deb11u4. - DLA-4550-1 libde265 for Debian 11 "Bullseye" . It was found that libde265, had multiple vulnerabilities which could lead to both stack and heap out of bound writes that could lead to denial of service, etc. Fixed in
1.0.11-0+deb11u4.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).