Security fixes
- DLA-4576-1 p7zip for Debian 11 "Bullseye" . Security issues in p7zip were fixed. Fixed in
16.02+really25.01+dfsg-0+deb11u1. - DLA-4577-1 p7zip-rar for Debian 11 "Bullseye" . Jaroslav Lobačevski from GitHub Security Lab discovered a memory corruption vulnerability in the RAR module of p7zip, a file archiver handling multiple formats. Fixed in
16.02+really25.00+ds-0+deb11u1. - DLA-4578-1 rails for Debian 11 "Bullseye" . Security issues in rails were fixed. Fixed in
2:6.0.3.7+dfsg-2+deb11u5. - DLA-4579-1 python-authlib for Debian 11 "Bullseye" . Bugs in python-authlib could cause authentication bypass or information leaks. Fix authentication and authorization bypass vulnerability by embedding a crafted public key in the jwk header field when key=None is passed to JWS deserialization functions. Fixed in
0.15.4-1+deb11u2. - DSA-6264-1 dnsmasq for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in dnsmasq could lead to cache poisoning, bypass of security controls, denial of service or local privilege escalation. Fixed in Trixie
2.91-1+deb13u1, Bookworm2.90-4~deb12u2.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- SparkyLinux announces Sparky 8.3. SparkyLinux announced Sparky 8.3 on May 11, a quarterly update based on Debian 13 Trixie with packages refreshed through May 9. This downstream distribution—not an official Debian release—offers desktop and minimal images for amd64 and Openbox or command-line images for ARM64. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).