Security fixes
- DSA-6356-1 imagemagick for Debian 13 "Trixie" . Bugs in imagemagick could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. Fixed in
8:7.1.1.43+dfsg1-1+deb13u10. - DLA-4640-1 mediawiki for Debian 11 "Bullseye" . Bugs in mediawiki could lead to information disclosure or access controls bypass. OATHAuth extension: Users API leaks whether privileged users have their user groups disabled for lack of 2FA. Fixed in
1:1.35.13-1+deb11u7. - DSA-6357-1 pillow for Debian 13 "Trixie" . Bugs in pillow could lead to denial of service or the execution of arbitrary code if malformed files are processed. Fixed in
11.1.0-5+deb13u3. - DSA-6358-1 libhttp-daemon-perl for Debian 13 "Trixie" . Bugs in libhttp-daemon-perl could lead to the execution of arbitrary shell commands or file overwrite when processing specially crafted input. Fixed in
6.16-1+deb13u1. - DSA-6359-1 gst-plugins-good1.0 for Debian 13 "Trixie" . Bugs in gst-plugins-good1.0 could lead to denial of service or potentially the execution of arbitrary code if a malformed media file is opened. Fixed in
1.26.2-1+deb13u2. - DSA-6360-1 squid for Debian 13 "Trixie" . Bugs in squid could lead to information disclosure or denial of service. Fixed in
6.13-2+deb13u2. - DLA-4639-1 libhttp-daemon-perl for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in libhttp-daemon-perl could lead to the execution of arbitrary shell commands or file overwrite when processing specially crafted input. Fixed in Bookworm
6.16-1+deb13u1~deb12u1, Bullseye6.12-1+deb11u2. - DSA-6355-1 linux for Debian 13 "Trixie" . Bugs in linux could lead to a privilege escalation, denial of service or information leaks. Fixed in
6.12.94-1. - DLA-4638-1 libgd-perl for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in libgd-perl could lead to the execution of arbitrary shell commands or file overwrite when processing specially crafted file names. Fixed in Bookworm
2.76-4+deb12u1, Bullseye2.73-1+deb11u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).