Security fixes
- DLA-4797-1 lemonldap-ng for Debian 12 "Bookworm" . Several vulnerabilities have been fixed in lemonldap-ng, a Web-SSO system. Access rules (locationRules) were tested against the raw request URI whereas web servers route on the decoded and normalized path. Fixed in
2.16.1+ds-deb12u10. - DSA-6517-1 nodejs for Debian 13 "Trixie" . Bugs in nodejs could lead to denial of service, permission model bypass, incorrect certificate validation or information disclosure. Fixed in
20.19.2+dfsg-1+deb13u3. - DSA-6518-1 incus for Debian 13 "Trixie" . Bugs in incus could lead to a bypass of security/authorisation restrictions, guest to host privilege escalation or information disclosure. Fixed in
6.0.4-2+deb13u11. - DSA-6519-1 swift for Debian 13 "Trixie" . A bug in swift could lead to information disclosure. Fixed in
2.35.1-0+deb13u4.
Announcements and releases
- Fw: Call for Debian 14 (forky) artwork proposals on debian-devel-announce .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).