Security fixes
- DLA-4877-1 thunderbird for Bookworm . Many Thunderbird security issues that could affect the mail client. Fixed in
1:153.6.0esr-1~deb12u2. - DLA-4878-1 chromium for Bookworm . Chromium bugs that could allow code execution, a crash or information leaks. Fixed in
156.0.8078.73-1~deb12u1. - DLA-4879-1 strongswan for Bookworm . Several strongSwan bugs that could crash the daemon, leak memory or cause other denial-of-service problems when handling IKE or certificates. Fixed in
5.9.8-5+deb12u6. - DSA-6602-1 linux for Trixie . A large set of Linux kernel vulnerabilities. Fixed in
6.12.115-2. - DSA-6603-1 git-annex for Trixie . A flaw that could let data leak across repositories via a special remote. Fixed in
10.20250416-2+deb13u1. - DSA-6604-1 incus for Trixie . Bugs in the Incus container/VM manager that could bypass authorization, escalate privileges, leak information or cause a denial of service. Fixed in
6.0.4-2+deb13u12. - DSA-6605-1 chromium for Trixie . Chromium issues that could allow code execution, a crash or information disclosure. Fixed in
156.0.8078.79-1~deb13u1.
Announcements and releases
No formal project announcements. On Planet Debian, Dirk Eddelbuettel released myman 0.13.0 to CRAN.
Project and event news
micronews was quiet. MiniDebConf Cambridge is still three days away (Nov 5–8 at Arm).
Notable discussions
- The I will no longer upload to NEW thread continued, including a side note on Debian's carbon footprint.
- More replies landed in the spdx2debian discussion.
Debian in the news
- Proton OS announces 2026.11.01 images. In an announcement dated November 2, Proton OS introduced 2026.11.01 Core and Frontier images, including Collabora Office and a firewall enabled by default. This Debian 13-based downstream project is not an official Debian release; November 1 is part of the image version, not an independently confirmed release date. View on timeline
Quiet sources
debian-announce, debian-news, bits.debian.org and the release team pages had no new posts.