News for hackers. Stuff that matters.

A comment on The Dirty Pipe Vulnerability. Parent comment

Re:The Dirty Pipe Vulnerability by greyface- on Monday March 07, 2022 @08:17AM (#30587357)
Debian stable (bullseye) is still vulnerable: https://security-tracker.debian.org/tracker/CVE-2022-0847
[ Parent | on HN ]
Re:The Dirty Pipe Vulnerability by deng on Monday March 07, 2022 @08:26AM (#30587432)
That page is not up-to-date, fix was released today:

https://lists.debian.org/debian-security-announce/2022/msg00...

[ Parent | on HN ]
Re:The Dirty Pipe Vulnerability by greyface- on Monday March 07, 2022 @08:29AM (#30587463)
It wasn't available via `apt-get update && apt-get dist-upgrade` as of when I drafted that comment, but I confirm that 5.10.92-2 seems to be released now.
[ Parent | on HN ]
Re:The Dirty Pipe Vulnerability by deng on Monday March 07, 2022 @08:36AM (#30587537)
Well the fix was released ~30 minutes ago, so that checks out. ;-)

The security-tracker site is now updated as well.

[ Parent | on HN ]
Re:The Dirty Pipe Vulnerability by bill_mcgonigle on Tuesday March 08, 2022 @02:22PM (#30605005)
Others, note that the new archive name is 'stable-security'. You might need to update your pins if you upgraded from Buster and you're not seeing the update now. I put in a pull request to add it to the release notes.
[ Parent | on HN ]