Security fixes
- DLA-4721-1 async-http-client for Debian 12 "Bookworm" and Debian 11 "Bullseye" . There was a potential cookie injection vulnerability in async-http-client, Java library used to make asynchronous HTTP requests. Prevent a potential cookie injection or cookie tossing vulnerability. Fixed in Bookworm
2.12.3-1+deb12u1, Bullseye2.12.2-1+deb11u1. - DSA-6414-1 udisks2 for Debian 13 "Trixie" . The following vulnerability has been discovered in the UDisks storage daemon: Azizcan Dastan and Ozlem Ozan discovered a local privilege escalation vulnerability in udisks2 involving the Filesystem.Mount D-Bus method. Fixed in
2.10.1-12.1+deb13u2. - DSA-6415-1 linux for Debian 13 "Trixie" . Bugs in linux could lead to a privilege escalation, denial of service or information leaks. Fixed in
6.12.101-1. - DSA-6413-1 libde265 for Debian 13 "Trixie" . Bugs in libde265 could lead to denial of service, memory exhaustion or potentially the execution of arbitrary code if a malformed media file is processed. Fixed in
1.0.15-1+deb13u1. - DLA-4722-1 redis for Debian 12 "Bookworm" and Debian 11 "Bullseye" . There was a potential remote-code vulnerability in Redis, the key-value database. In the unusual case where an authenticated attacker could execute the `RESTORE` command, a malicious `RESTORE` payload could have resulted in a double-free. Fixed in Bookworm
5:7.0.15-1~deb12u9, Bullseye5:6.0.16-1+deb11u9. - DSA-6416-1 jq for Debian 13 "Trixie" . Bugs in jq could lead to denial of service or potentially the execution of arbitrary code when processing untrusted input. Fixed in
1.7.1-6+deb13u3.
Announcements and releases
No formal project announcements.
Project and event news
- Bits covered DebConf26 closing and DebConf27.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).