Security fixes
- DLA-4574-1 linux-6.1 for Debian 11 "Bullseye" . Bugs in linux-6.1 could lead to local privilege escalation. Fixed in
6.1.170-3~deb11u1. - DLA-4575-1 firefox-esr for Debian 11 "Bullseye" . Bugs in firefox-esr could lead to the execution of arbitrary code. Fixed in
140.10.2esr-1~deb11u1. - DSA-6258-1 linux for Debian 12 "Bookworm" . Bugs in linux were fixed. 1.170-3. Fixed in
6.1.170-3. - DLA-4573-1 libpng1.6 for Debian 11 "Bullseye" . A security issue was fixed in libpng1.6. Fixed in
1.6.37-3+deb11u4. - DSA-6259-1 pyjwt for Debian 13 "Trixie" and Debian 12 "Bookworm" . PyJWT, a Python implementation of JSON web tokens insufficiently validated the "crit" header parameter, which could result in incomplete enforcement of authentication settings. For the oldstable distribution (bookworm), this problem has been fixed in version 2. Fixed in Trixie
2.10.1-2+deb13u1, Bookworm2.6.0-1+deb12u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).