Security fixes
- DLA-4711-1 starlette for Debian 12 "Bookworm" . Security issues in starlette were fixed. Fixed in
0.26.1-1+deb12u2. - DLA-4712-1 node-tar for Debian 12 "Bookworm" . Bugs in node-tar were fixed. js module to read and write portable tar archives. Generating a large number of sub-folders can consume memory on the system and even crash the Node. Fixed in
6.1.13+~cs7.0.5-1+deb12u1. - DLA-4713-1 sslh for Debian 12 "Bookworm" . There was a so-called "link following" vulnerability in sslh, a protocol multiplexor often used to share SSH and HTTPS on the same port. Fixed in
1.20-1+deb12u1. - DLA-4714-1 libmodbus for Debian 12 "Bookworm" . Security issues in libmodbus were fixed. Fixed in
3.1.6-2.1+deb12u1. - DLA-4710-1 chromium for Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
151.0.7922.71-1~deb12u1. - DSA-6409-1 libgd2 for Debian 13 "Trixie" . Bugs in libgd2 could lead to denial of service or potentially the execution of arbitrary code if a malformed GIF file is processed. Fixed in
2.3.3-14~deb13u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).