Security fixes
- DLA-4829-1 rails for Debian 12 "Bookworm" . Bugs in rails could lead to cross-site scripting, denial of service, path traversal, or the execution of arbitrary code. Fixed in
2:6.1.7.10+dfsg-1~deb12u3. - DLA-4827-1 python3.11 for Debian 12 "Bookworm" . Multiple vulnerabilities in Python 3.11. Malformed markup declarations could make html.parser.HTMLParser raise an unhandled AssertionError. Fixed in
3.11.2-6+deb12u9. - DLA-4828-1 gst-plugins-base1.0 for Debian 12 "Bookworm" . Bugs in gst-plugins-base1.0 could lead to denial of service or potentially the execution of arbitrary code if a malformed audio file is proce. Fixed in
1.22.0-3+deb12u7.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Q4OS 6.10 Andromeda released. Q4OS 6.10 Andromeda was released on October 8, based on Debian 13.7 Trixie. This downstream distribution—not an official Debian release—offers slimmer live media and a new first-login Wi-Fi connection tool. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13.7 "Trixie" remained the current stable release.