Security fixes
- DSA-6287-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
148.0.7778.178-1~deb13u1, Bookworm148.0.7778.178-1~deb12u1. - DSA-6288-1 thunderbird for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in thunderbird could lead to the execution of arbitrary code. Fixed in Trixie
1:140.11.0esr-1~deb13u1, Bookworm1:140.11.0esr-1~deb12u1. - DSA-6289-1 openvpn for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in openvpn could lead to denial of service or a leak of packet data from a previous handshake. Fixed in Trixie
2.6.14-1+deb13u2, Bookworm2.6.14-0+deb12u1. - DSA-6290-1 nss for Debian 13 "Trixie" . Bugs in nss could lead to or denial of service or potentially the execution of arbitrary code. Fixed in
2:3.110-1+deb13u2. - DSA-6286-1 evince for Debian 13 "Trixie" and Debian 12 "Bookworm" . Evince, a simple multi-page document viewer, is prone to a command injection vulnerability if a specially crafted PDF file is opened. For the oldstable distribution (bookworm), this problem has been fixed in version 43. Fixed in Trixie
48.1-3+deb13u1, Bookworm43.1-2+deb12u1. - DLA-4593-1 openjpeg2 for Debian 11 "Bullseye" . A vulnerability was identified in uclouvain. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. Fixed in
2.4.0-3+deb11u3.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Proxmox VE 9.2: Proxmox VE 9.2 was released on May 21, based on Debian 13.5 Trixie. This Debian-based virtualization platform—not an official Debian release—adds dynamic load balancing for high-availability guests and WireGuard and BGP networking fabrics. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).