Security fixes
- DLA-4629-1 apache2 for Debian 11 "Bullseye" . Bugs in apache2 could lead to remote code execution, privilege escalation, denial of service or information disclosure. Fixed in
2.4.67-1~deb11u3. - DSA-6342-1 jpeg-xl for Debian 13 "Trixie" . Missing input sanitising in the PNM/PBM parser of the reference code implementation of the JPEG XL format could result in denial of service or potentially the execution of arbitrary code if malformed images are processed. Fixed in
0.11.2-0.1~deb13u2. - DSA-6343-1 librabbitmq for Debian 13 "Trixie" . Bugs in librabbitmq could lead to denial of service or potentially the execution of arbitrary code. Fixed in
0.15.0-1+deb13u1. - DLA-4627-1 kernel-wedge for Debian 12 "Bookworm" . The kernel-wedge package has been updated to support building a backport of Linux 6.12. Fixed in
2.106~deb12u1. - DLA-4628-1 linux-base for Debian 12 "Bookworm" . The linux-base package has been updated to support installation of a backport of Linux 6.12. Fixed in
4.12.1~deb12u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).