Security fixes
- DLA-4679-1 mesa for Debian 11 "Bullseye" . A vulnerability has been found in the mesa 3D graphics library, possibly allowing out of bound memory access by craftet input. Fixed in
20.3.5-1+deb11u1. - DLA-4681-1 p7zip for Debian 11 "Bullseye" . Security issues in p7zip were fixed. Fixed in
16.02+really26.01+dfsg-0+deb11u1. - DLA-4680-1 imagemagick for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Which could lead to denial of service, information disclosure or potentially arbitrary code execution if malformed images are processed. 9.11.60. Fixed in Bookworm
8:6.9.11.60+dfsg-1.6+deb12u12, Bullseye8:6.9.11.60+dfsg-1.3+deb11u15. - DLA-4682-1 redis for Debian 12 "Bookworm" . There were two issues in Redis, the in-memory key/value database: An authenticated attacker could have exploited the master-replica synchronization mechanism to trigger a use-after-free on replicas where "replica-read-only" is disabled (or could be disabled),. Fixed in
5:7.0.15-1~deb12u8.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).