Forum: >>> Magnum BBS <<<

Re: Question about CVE fix back-porting to bullseye and bookworm

From Moritz =?iso-8859-1?Q?M=FChlenhoff?@21:1/5 to Jim Hodgins on Mon Mar 31 22:40:01 2025

On Mon, Mar 31, 2025 at 01:13:59PM -0700, Jim Hodgins wrote:

Hi,

I am wondering if the following CVE's fixed in trixie/sid will be
backported to bullseye and bookworm?

https://security-tracker.debian.org/tracker/CVE-2024-38541 https://security-tracker.debian.org/tracker/CVE-2024-38564 https://security-tracker.debian.org/tracker/CVE-2024-50061

CVE-2024-50061 is already fixed in the latest Bookworm point release.

For the other two, if you want to see them fixed, you can work
with the maintainers of the 6.1.x LTS kernel tree to accept a
backport: https://github.com/torvalds/linux/blob/master/Documentation/process/stable-kernel-rules.rst

The subsequent Debian update will then pick up the fix since we follow
the 6.1.x series.

Cheers,
Moritz

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Sysop:	Keyop
Location:	Huddersfield, West Yorkshire, UK
Users:	741
Nodes:	16 (2 / 14)
Uptime:	121:39:43
Calls:	12,468
Calls today:	10
Files:	15,200
Messages:	6,538,318