Security fixes
- DLA-4784-1 nginx for Debian 12 "Bookworm" . Security issues in nginx were fixed. Fixed in
1.22.1-9+deb12u10. - DSA-6504-1 libapache2-mod-auth-openidc for Debian 13 "Trixie" . Incorrect state cookie parsing in mod_auth_openidc, an OpenID Certified authentication and authorisation module for the Apache HTTP server that implements the OpenID Connect Relying Party functionality, could result in denial of service. Fixed in
2.4.17-1+deb13u1. - DSA-6505-1 bind9 for Debian 13 "Trixie" . Bugs in bind9 could lead to denial of service or cache poisoning. Fixed in
1:9.20.29-1~deb13u1. - DLA-4781-1 firefox-esr for Debian 12 "Bookworm" . Bugs in firefox-esr could lead to the execution of arbitrary code, information disclosure or privilege escalation. Fixed in
140.16.0esr-1~deb12u1. - DLA-4782-1 thunderbird for Debian 12 "Bookworm" . Bugs in thunderbird could lead to the execution of arbitrary code. Fixed in
1:140.16.0esr-1~deb12u1. - DSA-6506-1 chromium for Debian 13 "Trixie" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
153.0.8010.47-2~deb13u1. - DLA-4783-1 xz-utils for Debian 12 "Bookworm" . Bugs in xz-utils could lead to memory corruption in specific situations. Fixed in
5.4.1-1+deb12u2.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).