Security fixes
- DSA-6475-1 suricata-update for Debian 13 "Trixie" . Guillem Lefait discovered a path traversal attack in suricata-update, which allowed malformed rules to overwrite files on the system. Fixed in
1.3.4-1+deb13u1. - DSA-6476-1 chromium for Debian 13 "Trixie" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
151.0.7922.173-1~deb13u1. - DSA-6469-1 xrdp for Debian 13 "Trixie" . Bugs in xrdp could lead to denial of service, information disclosure, privilege escalation or the execution of arbitrary code. Several of these issues are exploitable by an unauthenticated remote attacker. Fixed in
0.10.1-3.1+deb13u2. - DSA-6470-1 gimp for Debian 13 "Trixie" . Bugs in gimp could lead to denial of service or potentially the execution of arbitrary code if malformed PSP, TIFF, DDS, PSD, SGI, FLI, FITS or ICNS files are opened. Fixed in
3.0.4-3+deb13u10. - DLA-4758-1 chromium for Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
151.0.7922.173-1~deb12u1. - DSA-6471-1 wireshark for Debian 13 "Trixie" . Bugs in wireshark could lead to denial of service or the execution of arbitrary code. Fixed in
4.4.18-0+deb13u1. - DSA-6472-1 bubblewrap for Debian 13 "Trixie" . Bugs in bubblewrap could lead to sandbox escape by malicious/compromised Flatpak apps. Fixed in
0.12.0-1~deb13u1. - DSA-6473-1 libdbi-perl for Debian 13 "Trixie" . Bugs in libdbi-perl could lead to denial of service, path traversal, bypass of file-backed filters or the execution of arbitrary code. Fixed in
1.652-2~deb13u1. - DSA-6474-1 cockpit for Debian 13 "Trixie" . Bugs in cockpit could lead to the execution of arbitrary code or denial of service. Fixed in
337-1+deb13u2.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).