Security fixes
- DSA-6394-1 firefox-esr for Debian 13 "Trixie" . Bugs in firefox-esr could lead to the execution of arbitrary code, bypass of the same-origin policy, privilege escalation, information disclosure, spoofing or sandbox escape. Fixed in
140.13.0esr-1~deb13u1. - DLA-4694-1 nss for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in nss could lead to or denial of service or potentially the execution of arbitrary code. Fixed in Bookworm
2:3.87.1-1+deb12u3, Bullseye2:3.61-1+deb11u6. - DLA-4695-1 firefox-esr for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in firefox-esr could lead to the execution of arbitrary code, bypass of the same-origin policy, privilege escalation, information disclosure, spoofing or sandbox escape. 13. Fixed in Bookworm
140.13.0esr-1~deb12u1, Bullseye140.13.0esr-1~deb11u1. - DSA-6395-1 bind9 for Debian 13 "Trixie" . Bugs in bind9 could lead to bypass of DNSSEC validation, RPZ policy bypass, cache poisoning or denial of service. Fixed in
1:9.20.26-1~deb13u1. - DSA-6396-1 chromium for Debian 13 "Trixie" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
150.0.7871.181-1~deb13u1.
Announcements and releases
- Perl 5.42 transition underway on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Q4OS Imager 1.7.5 announced. On July 22, the Debian-based Q4OS project announced Imager 1.7.5 for Linux and Windows. The graphical tool downloads a chosen Q4OS edition and writes bootable installation media to a USB drive or SD card. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).