Security fixes
- DLA-4649-1 libdbi-perl for Debian 11 "Bullseye" . Bugs in libdbi-perl could lead to denial of service or potentially execution of arbitrary code. Fixed in
1.643-3+deb11u1. - DLA-4650-1 giflib for Debian 11 "Bullseye" . Security issues in giflib were fixed. Fixed in
5.1.9-2+deb11u1. - DLA-4652-1 gdcm for Debian 11 "Bullseye" . Bugs in gdcm could lead to a heap buffer overflow. Fixed in
3.0.8-2+deb11u1. - DLA-4651-1 python-urllib3 for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Python-urllib3, did not strip out sensitive headers (such as `Authorization` or `Cookie`) during cross-origin redirects followed from the low-level API, which could lead to information disclosure or authorization bypass. Fixed in Bookworm
1.26.12-1+deb12u4, Bullseye1.26.5-1~exp1+deb11u4. - DLA-4653-1 openvpn for Debian 11 "Bullseye" . Security issues in openvpn were fixed. Fixed in
2.5.1-3+deb11u3.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).