Security fixes
- DLA-4589-1 nginx for Debian 11 "Bullseye" . Bugs in nginx could lead to bypass of authorisation rules or rate limits, denial of service or memory disclosure. Fixed in
1.18.0-6.1+deb11u6. - DSA-6280-1 netatalk for Debian 13 "Trixie" . Bugs in netatalk could lead to denial of service, information disclosure or the execution of arbitrary code. Fixed in
4.2.3~ds-1+deb13u2. - DLA-4590-1 erlang for Debian 11 "Bullseye" . Multiple vulnerabilities were discoverd in Erlang, real-time, distributed functional language. Insufficient path sanitizing in tftp_file module. Fixed in
1:23.2.6+dfsg-1+deb11u4.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Q4OS 6.7 installation media released. Q4OS announced version 6.7 Andromeda installation media on May 18, based on Debian 13.5 Trixie. This downstream distribution—not an official Debian release—includes cumulative Q4OS improvements, with updates also delivered to existing installations. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).