Security fixes
- DSA-6423-1 kitty for Debian 13 "Trixie" . Bugs in kitty could lead to the execution of arbitrary code, command injection into the shell running in the terminal, or the overwriting of arbitrary files, if untrusted content is displayed in a terminal window. Fixed in
0.41.1-2+deb13u2. - DSA-6424-1 xen for Debian 13 "Trixie" . Bugs in xen could lead to privilege escalation, information disclosure or denial of service. Fixed in
4.20.3+127-gc42374a105-0+deb13u1. - DLA-4726-1 ca-certificates for Debian 12 "Bookworm" and Debian 11 "Bullseye" . The Mozilla CA certificate bundle shipped in ca-certificates was updated to version 2.74. Fixed in Bookworm
20250419~deb12u1, Bullseye20250419~deb12u1~deb11u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).