Security fixes
- DSA-6236-1 firefox-esr for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in firefox-esr could lead to the execution of arbitrary code, information disclosure or sandbox escape. Fixed in Trixie
140.10.1esr-1~deb13u1, Bookworm140.10.1esr-1~deb12u1. - DSA-6237-1 openjdk-17 for Debian 12 "Bookworm" . Bugs in openjdk-17 could lead to incorrect generation of cryptographic keys, denial of service, information disclosure, XEE/XEE attacks or incorrect validation of Kerberos credentials. Fixed in
17.0.19+10-1~deb12u2. - DLA-4553-1 policykit-1 for Debian 11 "Bullseye" . Multiple vulnerabilities where identified in polkit, which can enable an unprivileged user to cause polkit to crash, due to file descriptor exhaustion. Fixed in
0.105-31+deb11u2.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).