Security fixes
- DSA-6566-1 expat for Debian 13 "Trixie" . Bugs in expat could lead to denial of service or potentially the execution of arbitrary code, if a malformed XML file is processed. Fixed in
2.9.0-1~deb13u1. - DLA-4839-1 gst-plugins-bad1.0 for Debian 12 "Bookworm" . Security issues in gst-plugins-bad1.0 were fixed. Fixed in
1.22.0-4+deb12u8. - DSA-6567-1 cifs-utils for Debian 13 "Trixie" . Bugs in cifs-utils could lead to privilege escalation. Fixed in
2:7.4-1+deb13u1. - DLA-4838-1 chromium for Debian 12 "Bookworm" . Bugs that could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
155.0.8059.79-1~deb12u1. - DSA-6569-1 apache2 for Debian 13 "Trixie" . Bugs in apache2 could lead to denial of service, information disclosure, authentication bypass or HTTP request smuggling. Fixed in
2.4.69-1~deb13u1. - DLA-4840-1 jq for Debian 12 "Bookworm" . The fix for in 1. stopped one string from growing past its limit, but repeating a string with * could still keep appending. A repeat that cannot fit now fails with "Repeat string result too long". Fixed in
1.6-2.1+deb12u3. - DSA-6568-1 linux for Debian 13 "Trixie" . Bugs in linux could lead to a privilege escalation, denial of service or information leaks. Fixed in
6.12.113-1.
Announcements and releases
No formal project announcements.
Project and event news
No major project or event posts beyond the items above.
Notable discussions
No standout project-wide threads singled out for this day beyond routine packaging mail.
Debian in the news
- Q4OS announces a Swiss mirror. On October 16, the Debian-based Q4OS project announced a new Swiss mirror for installation images and APT repositories, synchronized daily. Existing installations do not need to change their mirror settings. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page for this day. Debian 13.7 "Trixie" remained the current stable release.