Security fixes
- DLA-4591-1 rsync for Debian 11 "Bullseye" . Bugs in rsync could lead to local privilege escalation, bypass of intended access restrictions, remote memory disclosure to an authenticated daemon peer or denial of service. Fixed in
3.2.3-4+deb11u4. - DSA-6283-1 firefox-esr for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in firefox-esr could lead to the execution of arbitrary code, bypass of the same-origin policy, privilege escalation, information disclosure, spoofing or sandbox escape. Fixed in Trixie
140.11.0esr-1~deb13u1, Bookworm140.11.0esr-1~deb12u1. - DSA-6284-1 pdns for Debian 13 "Trixie" . Bugs in pdns could lead to denial of service or information disclosure. Fixed in
4.9.15-0+deb13u1. - DSA-6285-1 bind9 for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in bind9 could lead to denial of service. Fixed in Trixie
1:9.20.23-1~deb13u1, Bookworm1:9.18.49-1~deb12u1. - DLA-4592-1 firefox-esr for Debian 11 "Bullseye" . Bugs in firefox-esr could lead to the execution of arbitrary code, bypass of the same-origin policy, privilege escalation, information disclosure, spoofing or sandbox escape. Fixed in
140.11.0esr-1~deb11u1. - DSA-6282-1 rsync for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in rsync could lead to local privilege escalation, bypass of intended access restrictions, remote memory disclosure to an authenticated daemon peer or denial of service. Fixed in Trixie
3.4.1+ds1-5+deb13u3, Bookworm3.2.7-1+deb12u5.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).