Security fixes
- DLA-4744-1 calibre for Debian 12 "Bookworm" . A malicious EPUB, OPF or PDF file can execute arbitrary Python code when its metadata is read by calibre, an e-book manager. There was a regression introduced by the fix of. Fixed in
6.13.0+repack-2+deb12u10. - DSA-6447-1 librabbitmq for Debian 13 "Trixie" . Bugs in librabbitmq could lead to denial of service or potentially the execution of arbitrary code. Fixed in
0.15.0-1+deb13u2. - DSA-6448-1 spip for Debian 13 "Trixie" . A bug in spip could lead to unauthenticated remote code execution. Fixed in
4.4.20+dfsg-0+deb13u1. - DSA-6449-1 swift for Debian 13 "Trixie" . Bugs in swift could lead to information disclosure via SSRF or authorisation bypass in the s3api middleware. Fixed in
2.35.1-0+deb13u3. - DSA-6450-1 srt for Debian 13 "Trixie" . Bugs in srt could lead to denial of service or encryption bypass. Fixed in
1.5.4-1+deb13u1. - DLA-4745-1 linux-6.12 for Debian 12 "Bookworm" . Bugs in linux-6.12 could lead to a privilege escalation, denial of service or information leaks. This update additionally includes many more bug fixes from stable update 6.12.101. Fixed in
6.12.101-1~deb12u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).