Security fixes
- DLA-4691-1 rtpengine for Debian 12 "Bookworm" . There was a origin-validation error in rtpengine, an open-source media proxy for real-time audio and video traffic. Fixed in
10.5.3.5-1+deb12u1. - DLA-4692-1 samba for Debian 11 "Bullseye" . Bugs in samba could lead to bypass of access checks, overwrite of files in unintended situations using the WORM vfs module, installing CA certificates over http without verification when auto-enrol. Fixed in
2:4.13.13+dfsg-1~deb11u8. - DLA-4690-1 xz-utils for Debian 11 "Bullseye" . There was a potential buffer overflow in xz-utils, a popular data-compression utility and library. Fixed in
5.2.5-2.1~deb11u2. - DLA-4693-1 roundcube for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in roundcube could lead to cross-site scripting, server-side request forgery, information disclosure, denial of service, or potentially account takeover. Fixed in Bookworm
1.6.5+dfsg-1+deb12u10, Bullseye1.4.15+dfsg.1-1+deb11u10. - DSA-6393-1 linux for Debian 13 "Trixie" . Bugs in linux could lead to a privilege escalation, denial of service or information leaks. Fixed in
6.12.96-1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Debian for portable science teaching: The DebConf26 programme scheduled Georges Khaznadar’s July 21 talk about Debian’s educational and scientific software and building a portable USB system containing it. This is a programme listing, not independent confirmation that the session took place. View on timeline
- Debian in community healthcare: The DebConf26 programme scheduled Gaspar Alejandro Mussin’s July 21 presentation of a Debian-based clinical database project for AUPAC, a nonprofit in Rosario, Argentina. The session abstract describes a Python application and patient-data privacy; this is a programme listing, not independent confirmation that the talk took place. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).