Debian Bookworm and Bullseye Users Receive Important Linux Security Updates

Fizz, 1 year ago

As a headline reader I’d sure hope users of these distros receive security updates

corvus, 1 year ago

Still on 6.1.0-17 and nothing shows up after sudo apt update.

SpaceCadet, 1 year ago (edited 1 year ago)

You’re good. That’s the latest image, it’s just the confusing Debian version scheme where the package version is not the same as the kernel version. Debian package version 6.1.0-17 = kernel version 6.1.69-1

See:

<span style="color:#323232;">$ uname -a
</span><span style="color:#323232;">Linux debian12 6.1.0-17-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.69-1 (2023-12-30) x86_64 GNU/Linux
</span>

And:

<span style="color:#323232;">$ dpkg-query --list linux-image-6.1.0-17-amd64
</span><span style="color:#323232;">Desired=Unknown/Install/Remove/Purge/Hold
</span><span style="color:#323232;">| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
</span><span style="color:#323232;">|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
</span><span style="color:#323232;">||/ Name                       Version      Architecture Description
</span><span style="color:#323232;">+++-==========================-============-============-=================================
</span><span style="color:#323232;">ii  linux-image-6.1.0-17-amd64 6.1.69-1     amd64        Linux 6.1 for 64-bit PCs (signed)
</span>

idefix, 1 year ago

6.1.0-17 is the one I received today. I was on 6.1.0-16 until now.

nik282000, 1 year ago

Good thing my server still runs Jessie!

Piya, 1 year ago

This update underscores Debian’s commitment to user security. Bookworm and Bullseye users should promptly apply these important Linux security updates to enhance system protection. Staying current with these patches ensures a resilient and secure computing environment. Debian’s proactive approach is commendable in addressing potential vulnerabilities and maintaining the integrity of users’ Linux systems.

joeldebruijn, 1 year ago

I had a security download (but not yet installed) ready yesterday. Logged off without installing. Turned on my device today and couldnt log in. Checked my pwd 3 times before seeing "authentication service not working " iirc.

After reboot it installed and logging in worked.

Is this related or not and is it expected? Not being able to log in without a mandatory patch first so to say?

DaPorkchop_, 1 year ago

no that just sounds like a bug