Security fixes
- DLA-4803-1 ruby-oj for Debian 12 "Bookworm". Bugs in ruby-oj could lead to denial of service or memory disclosure. Fixed in
3.14.2-1+deb12u1. - DLA-4802-1 python-django for Debian 12 "Bookworm" . Security issues in python-django were fixed. Fixed in
3:3.2.25-0+deb12u5. - DLA-4804-1 libsmpp34 for Debian 12 "Bookworm" . Bugs in libsmpp34 could lead to memory corruption. Fixed in
1.14.1-3+deb12u1. - DSA-6532-1 tor for Debian 13 "Trixie" . Bugs in tor could lead to denial of service. Fixed in
0.4.9.13-0+deb13u1. - DSA-6533-1 firefox-esr for Debian 13 "Trixie" . Bugs in firefox-esr could lead to the execution of arbitrary code, sandbox escape, information disclosure or privilege escalation. Debian follows the extended support releases (ESR) of Firefox. Fixed in
153.4.0esr-1~deb13u1. - DSA-6531-1 openssl for Debian 13 "Trixie" . Bugs in openssl could lead to denial of service, information disclosure or potentially recovery of private keys. Additional details can be found in the upstream advisories: https://openssl-library.org/news/secadv/20260929.txt. Fixed in
3.5.7-1~deb13u3. - DLA-4805-1 mkvtoolnix for Debian 12 "Bookworm" . Security issues in mkvtoolnix were fixed. Fixed in
74.0.0-1+deb12u1. - DLA-4806-1 pgextwlist for Debian 12 "Bookworm" . Security issues in pgextwlist were fixed. Fixed in
1.15-2+deb12u1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13 "Trixie" was the current stable release through this period (point releases noted on their own days).