Security fixes
- DSA-6500-1 tor for Debian 13 "Trixie" . Bugs in tor could lead to denial of service. Fixed in
0.4.9.12-0+deb13u2. - DSA-6501-1 firefox-esr for Debian 13 "Trixie" . Bugs in firefox-esr could lead to the execution of arbitrary code, information disclosure or privilege escalation. Fixed in
140.16.0esr-1~deb13u1. - DSA-6502-1 mkvtoolnix for Debian 13 "Trixie" . Bugs in mkvtoolnix could lead to the execution of arbitrary code when processing malformed .mkv files. Fixed in
92.0-1+deb13u1. - DSA-6496-2 nginx for Debian 13 "Trixie" . The update for nginx released as DSA 6496-1 caused a regression in the nginx-dev package: the backported fix for declared two private header files, which are not shipped in nginx-dev, as dependencies of the module build, so third-party nginx modules could no l. Fixed in
1.26.3-3+deb13u9. - DSA-6503-1 thunderbird for Debian 13 "Trixie" . Bugs in thunderbird could lead to the execution of arbitrary code. Fixed in
1:140.16.0esr-1~deb13u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Q4OS 6.9 installation media released. Q4OS announced 6.9 Andromeda installation media on September 16, based on Debian 13.7 Trixie. This downstream distribution—not an official Debian release—includes updated Trinity packages and cumulative Q4OS improvements. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).