Security fixes
- DLA-4831-1 libgit2 for Debian 12 "Bookworm" . Bugs in libgit2 could lead to path traversal, denial of service, credential leaks, or the execution of arbitrary commands on an SSH server. Fixed in
1.5.1+ds-1+deb12u2. - DSA-6554-1 keystone for Debian 13 "Trixie" . A security issue was fixed in keystone. Fixed in
2:27.0.0-3+deb13u6. - DSA-6555-1 librsvg for Debian 13 "Trixie" . Librsvg, a library to render Scalable Vector Graphics, incorrectly parsed files with nested XML includes, which could result in denial of service or potentially the execution of arbitrary code. Fixed in
2.60.0+dfsg-1+deb13u1. - DSA-6556-1 nagios4 for Debian 13 "Trixie" . Bugs in nagios4 could lead to cross-site request forgery, cross-site scripting or the execution of arbitrary commands. Fixed in
4.4.6-4.1+deb13u2. - DSA-6557-1 ntfs-3g for Debian 13 "Trixie" . Bugs in ntfs-3g could lead to denial of service, information leak or potentially local root privilege escalation. Fixed in
1:2022.10.3-5+deb13u3. - DSA-6553-1 chromium for Debian 13 "Trixie" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
155.0.8059.39-1~deb13u1.
Announcements and releases
- micronews noted the registration deadline for MiniDebConf Beijing (Oct 18).
Project and event news
Planning continued for MiniDebConf Beijing later in the month.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13.7 "Trixie" remained the current stable release.