Security fixes
- DSA-6597 dpdk for Debian 13 "Trixie" . Several vulnerabilities were discovered in DPDK, a set of libraries for fast packet processing. Depending on enabled functionality, crafted packets or malicious guest requests could cause denial of service or memory corruption. Fixed in
24.11.8-0+deb13u1. - DLA-4871-1 cyrus-sasl2 for Debian 12 "Bookworm" . An issue has been found in cyrus-sasl2, a SASL (Simple Authentication and Security Layer) implementation for the Cyrus mail system. The issue is related to a heap-based buffer overflow due to not recomputing a buffer size in the DIGEST-MD5 plugin. Fixed in
2.1.28+dfsg-10+deb12u1. - DLA-4870-1 antiword for Debian 12 "Bookworm" . Several issues have been found in antiword, a tool to converts MS Word files to text, PS, PDF and XML. Unfortunately no issue has been assigned a CVE id yet. The issues are related to heap out-of-bounds write in several parts of the software or integer divide by zero. Fixed in
0.37-16+deb12u1. - DSA-6598 thunderbird for Debian 13 "Trixie" . Multiple security issues were discovered in Thunderbird, which could lead to the execution of arbitrary code or information disclosure Fixed in
1:153.6.0esr-1~deb13u1.
Announcements and releases
No formal project announcements.
Project and event news
- Matthew Garrett wrote about adding Google Cast support to a Samsung soundbar.
- Russell Coker posted more notes on the Furilabs FLX1s phone.
- Russell Coker argued that fuel should be more expensive while supply stays tight.
- Russell Coker reviewed the Radxa Rock 5A RK3588S board.
Notable discussions
No standout project-wide threads on debian-devel for this day beyond routine ITPs.
Debian in the news
- Tails 7.16 released. Tails 7.16 was released on October 30, updating Tor Browser to 16.0 and fixing OpenPGP support in Thunderbird. Tails is built on Debian, but this is a Tails release—not an official Debian release. View on timeline
- RefreshOS announces an in-place 3.0-to-3.1 upgrade. On October 30, the Debian-based RefreshOS project announced that users could upgrade from 3.0 to 3.1 without a fresh installation. Its new walkthrough explains adding the RefreshOS v3 Stable Repository and completing the upgrade. View on timeline
Quiet sources
Nothing new on debian-announce, debian-news, bits.debian.org or the official News page. Debian 13.7 "Trixie" remained the current stable release.