Security fixes
- DLA-4568-1 lcms2 for Debian 11 "Bullseye" . There was an integer overflow vulnerability in lcms2, aka Little CMS. Fixed in
2.12~rc1-2+deb11u1. - DSA-6250-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
148.0.7778.96-1~deb13u1, Bookworm148.0.7778.96-1~deb12u1. - DSA-6251-1 libreoffice for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in libreoffice could lead to an out-of-bounds write if OOXML documents with malformed encryption parameters are opened. For the oldstable distribution (bookworm), this problem has been fixed in version 4:7. Fixed in Trixie
4:25.2.3-2+deb13u4, Bookworm4:7.4.7-1+deb12u11. - DSA-6252-1 prosody for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in prosody could lead to denial of service or insufficient access control when using the SOCKS5 proxy module. Fixed in Trixie
13.0.1-1+deb131u, Bookworm0.12.3-1+deb12u1. - DLA-4569-1 tzdata for Debian 11 "Bullseye" . Updates the timezone data to the latest IANA database release. Fixed in
2026b-0+deb11u1. - DLA-4570-1 libdatetime-timezone-perl for Debian 11 "Bullseye" . Updates the timezone data to the latest IANA database release. Fixed in
1:2.47-1+2026b.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).