Security fixes
- DSA-6590 firefox-esr for Debian 13 "Trixie" . Multiple security issues have been found in the Mozilla Firefox web browser, which could lead to the execution of arbitrary code, sandbox escape, bypass of the same-origin policy, privilege escalation, information disclosure or spoofing. Fixed in
153.6.0esr-1~deb13u1. - DSA-6591 openjdk-25 for Debian 13 "Trixie" . Several vulnerabilities have been discovered in the OpenJDK Java runtime, which could lead to denial of service, sandbox breakout, incomplete certificate checks or information disclosure. Fixed in
25.0.5+8-1~deb13u1. - DSA-6592 chromium for Debian 13 "Trixie" . Security issues were discovered in Chromium which could lead to the execution of arbitrary code, denial of service, or information disclosure. Fixed in
156.0.8078.73-1~deb13u1.
Announcements and releases
- micronews invited people to MiniDebConf Cambridge (Nov 5–8 at Arm), with sprint days and talks .
Project and event news
No major project or event posts beyond the items above.
Notable discussions
- The NEW-queue discussion continued, and a spdx2debian sub-thread branched off .
- Mathias Gibbens posted an RFH for logcheck.
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page. Debian 13.7 "Trixie" remained the current stable release.