Security fixes
- DSA-6429-1 caddy for Debian 13 "Trixie" . Bugs in caddy could lead to the bypass of path- or host-based access controls, the execution of an unintended file by a FastCGI backend, the injection of identity headers trusted by applications running behind Caddy, unauthorised reconfiguration of the server. Fixed in
2.6.2-12+deb13u1. - DLA-4729-1 nss for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in nss could lead to execution of arbitrary code if a specially crafted certificate is processed. Fixed in Bookworm
2:3.87.1-1+deb12u4, Bullseye3.61-1+deb11u7. - DSA-6427-1 wordpress for Debian 13 "Trixie" . Bugs in wordpress could lead to cross-site scripting, server-side request forgery, privilege escalation or remote code execution. Fixed in
6.8.7+dfsg1-0+deb13u1. - DSA-6428-1 libyaml-syck-perl for Debian 13 "Trixie" . Bugs in libyaml-syck-perl could lead to denial of service and potentially arbitrary code execution. Fixed in
1.34-2+deb13u3. - DLA-4727-1 thunderbird for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in thunderbird could lead to the execution of arbitrary code. Fixed in Bookworm
1:140.13.0esr-2~deb12u1, Bullseye1:140.13.0esr-2~deb11u1. - DLA-4728-1 chromium for Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
151.0.7922.108-1~deb12u1. - DLA-4730-1 libyaml-syck-perl for Debian 12 "Bookworm" and Debian 11 "Bullseye" . Bugs in libyaml-syck-perl could lead to denial of service and potentially arbitrary code execution. Fixed in Bookworm
1.34-2+deb12u3, Bullseye1.34-1+deb11u2. - DSA-6425-1 openjdk-21 for Debian 13 "Trixie" . Bugs in openjdk-21 could lead to incorrect validation of certificates or signed Jar files, denial of service or information disclosure. Fixed in
21.0.12+8-1~deb13u1. - DSA-6426-1 icinga2 for Debian 13 "Trixie" . Bugs in icinga2 could lead to denial of service, information disclosure, privilege escalation or the compromise of a monitoring node. The fix for changes /etc/logrotate.d/icinga2, which is a configuration file. Fixed in
2.14.6-1+deb13u1.
Announcements and releases
- tag2upload supports pristine-tar on debian-devel-announce .
Project and event news
- DebConf26 Local Team posted a goodbye note.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- SparkyLinux announces Sparky 8.4 with 32-bit images. SparkyLinux announced version 8.4 on August 10, restoring 32-bit i686-pae installation images alongside amd64 and ARM64 editions. This Debian 13 Trixie-based distribution—not an official Debian release—offers lightweight Openbox and command-line options for older 32-bit computers. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).