Security fixes
- DSA-6323-1 apache2 for Debian 13 "Trixie" and Debian 12 "Bookworm" . Incorrect cookie header accounting in the HTTP/2 implementation of the Apache HTTP server may result in denial of service (excessive resources consumption). For the oldstable distribution (bookworm), this problem has been fixed in version 2. Fixed in Trixie
2.4.67-1~deb13u3, Bookworm2.4.67-1~deb12u3. - DSA-6324-1 request-tracker5 for Debian 13 "Trixie" and Debian 12 "Bookworm" . Security issues in request-tracker5 were fixed. Fixed in Trixie
5.0.7+dfsg-4+deb13u3, Bookworm5.0.3+dfsg-3~deb12u6. - DLA-4619-1 tomcat9 for Debian 11 "Bullseye" . Bugs in tomcat9 could lead to a denial of service, authentication bypass or the disclosure of sensitive information. Fixed in
9.0.118-0+deb11u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).