Security fixes
- DSA-6549-1 xz-utils for Debian 13 "Trixie" . An invalid memory write in the LZMA1 decoders of xz-utils, the XZ-format compression utilities, could result in denial of service or potentially the execution of arbitrary code. Fixed in
5.8.1-1+deb13u2. - DLA-4826-1 puma for Debian 12 "Bookworm" . Security issues in puma were fixed. Fixed in
5.6.5-3+deb12u2.
Announcements and releases
- Bits from Debian opened the call for artwork proposals for Debian 14 "Forky" (deadline Nov 26).
- micronews also highlighted the Forky artwork call .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- GXDE OS 25.5 released. GXDE OS 25.5 was released on October 7 with broad Wayland support and more desktop components migrated to Qt 6. It is a Debian-based distribution, not an official Debian release. View on timeline
- JatayuOS 1.0 Udaan introduction published. An introduction dated October 7 presents JatayuOS 1.0 Udaan, an independent Debian 13-based distribution with KDE Plasma and offline installation—not an official Debian release. The page also records final-ISO checksum verification on October 13; October 7 is the article date, not a separately verified final-ISO release date. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13.7 "Trixie" remained the current stable release.