Security fixes
- DSA-6325-1 chromium for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in Trixie
149.0.7827.53-1~deb13u1, Bookworm149.0.7827.53-1~deb12u1. - DSA-6326-1 nginx for Debian 13 "Trixie" and Debian 12 "Bookworm" . Bugs in nginx could lead to remote code execution, denial of service or memory disclosure. Fixed in Trixie
1.26.3-3+deb13u6, Bookworm1.22.1-9+deb12u8. - DSA-6327-1 request-tracker4 for Debian 12 "Bookworm" . Security issues in request-tracker4 were fixed. Fixed in
4.4.6+dfsg-1.1+deb12u4. - DLA-4620-1 apache2 for Debian 11 "Bullseye" . Incorrect cookie header accounting in the HTTP/2 implementation of the Apache HTTP server may result in denial of service (excessive resources consumption). Fixed in
2.4.67-1~deb11u2.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).