Security fixes
- DSA-6565-1 spip for Debian 13 "Trixie" . A bug in spip could lead to unauthenticated remote code execution. Fixed in
4.4.28+dfsg-0+deb13u1. - DLA-4837-1 gst-plugins-good1.0 for Debian 12 "Bookworm" . Security issues in gst-plugins-good1.0 were fixed. Fixed in
1.22.0-5+deb12u4. - DSA-6562-1 chromium for Debian 13 "Trixie" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
155.0.8059.79-1~deb13u1. - DLA-4835-1 mariadb for Debian 12 "Bookworm" . Security issues in mariadb were fixed. Fixed in
10.11.19-0+deb12u1. - DLA-4836-1 firefox-esr for Debian 12 "Bookworm" . Bugs in firefox-esr could lead to the execution of arbitrary code, sandbox escape, information disclosure, mitigation bypass or privilege escalation. Fixed in
153.5.0esr-1~deb12u1. - DSA-6563-1 mutt for Debian 13 "Trixie" . Incorrect parsing of Content-Type headers in the Mutt mail user agent could result in denial of service or potentially the execution of arbitrary code. Fixed in
2.2.13-1+deb13u2. - DSA-6564-1 jpeg-xl for Debian 13 "Trixie" . Missing input sanitising in the APNG parser in the reference code implementation of the JPEG XL format could result in denial of service or information disclosure if malformed images are processed. Fixed in
0.11.2-0.1~deb13u3.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13.7 "Trixie" remained the current stable release.