Security fixes
- DSA-6411-1 aom for Debian 13 "Trixie" . Bugs in aom were fixed. All of them affect the encoder; applications that only decode AV1 video are not affected. Fixed in
3.12.1-1+deb13u1. - DSA-6412-1 botan3 for Debian 13 "Trixie" . Bugs in botan3 could lead to denial of service, certificate validation bypass or authentication bypass. These issues have been addressed by updating botan3 to the new upstream release 3.12.0. Fixed in
3.12.0+dfsg-2~deb13u1. - DLA-4716-1 ruby2.7 for Debian 11 "Bullseye" . Ruby a popular language was affected by multiple vulnerabilities The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. Fixed in
2.7.4-1+deb11u6.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).