There are 13 open security issues in buster.
commit c3a816d81323e7892470b30e1c6a6f63cf685819 Merge: 26093a1 39e9bec Author: Ben Hutchings <benh@debian.org> Date: Sun Sep 1 01:31:18 2024 +0200 Merge branch 'fix-tas-links' into 'master' Add missing symlinks for tas2563 and tas2781 See merge request kernel-team/firmware-nonfree!103 commit 26093a102169eba59dc6f9e2e77156b79e135974 Merge: 0fb2aa1 39d5ebb Author: Ben Hutchings <benh@debian.org> Date: Sat Aug 31 23:11:40 2024 +0000 Merge branch 'nvidia-breaks' into 'master' nvidia-graphics: Add versioned Breaks on initramfs-tools to avoid bug #1076539 See merge request kernel-team/firmware-nonfree!105 commit 39d5ebb796b867f4e9f13fa77ab15e016e74f53a Author: Ben Hutchings <benh@debian.org> Date: Sat Aug 31 16:59:19 2024 +0200 nvidia-graphics: Add versioned Breaks on initramfs-tools to avoid bug #1076539 initramfs-tools bug #1076539 (duplication of firmware files accessed through directory symlinks) has now been fixed in unstable and in bookworm (in point release 12.7). This bug was specifically triggered by firmware-nvidia-graphics in conjunction with plymouth or other package that adds graphics drivers to the initramfs. To ensure that a backport of firmware-nvidia-graphics doesn't trigger this, add a versioned Breaks against unfixed versions of initramfs-tools. commit 0fb2aa19e65dbb1bf7df6678032700a1941c61c0 Merge: 180862e 2840e5a Author: Ben Hutchings <benh@debian.org> Date: Sat Aug 31 22:37:53 2024 +0000 Merge branch 'linux-support-6.10' into 'master' Update to linux-support-6.10.6 See merge request kernel-team/firmware-nonfree!104 commit 2840e5a7697e909d2b58b1a9a6a3bedaf95f3854 Author: Ben Hutchings <benh@debian.org> Date: Sat Aug 31 21:22:08 2024 +0200 Update to linux-support-6.10.6 * d/rules.defs: Update KERNELVERSION. * d/b/gencontrol.py: - Use dataclasses for BinaryPackage and Template. - Use read_deb822 and write_deb822 functions; delete write_rfc822 method. - Define BinaryPackage subclass adding the 'Homepage' field missing from BinaryPackage in linux-support. - Override do_extra method because this is currently broken in linux-support. * d/t/extra.control.in: Delete 'Meta-Rules-Target' fields which are now set by gencontrol. commit 45a42e28f92c7fb66b92420670436e5cae974450 Author: Ben Hutchings <benh@debian.org> Date: Sat Aug 31 21:14:59 2024 +0200 Use linux-support bundle API to replace much custom logic In preparation for updating to a new version of linux-support, stop overriding so many Gencontrol methods and use the new(ish) bundle API. * d/rules.real: Replace 'binary-indep' target with 'binary_generic' and 'binary_meta' targets, following the convention required by bundles. * d/templates: - Rename control template files to follow the convention required by bundles. - Add 'Meta-Rules-Target' field to each control stanza. * d/b/gencontrol.py: - Move custom logic from __call__() down to do_main(). - In do_package(), use self.add_packages() to add the package. Drop makefile and packages parameters. - In do_main(), stop adding now-redundantmakefile rules. - Delete now-redundant __call__(), do_source(), do_extra(), write(), write_conrol(), and write_makefile() functions. * d/b/gencontrol.py, d/rules.real: Substitute commas in FILES and LINKS variables. As each command is wrapped in an if_package macro invocation, we can't include commas in the command. commit 36eb65eeb88e915b4bc93c7a2980ebeff9209d63 Author: Ben Hutchings <benh@debian.org> Date: Sat Aug 31 17:16:43 2024 +0200 d/b/gencontrol.py: Stop using unnecessary PackageDescription subclass This subclass was necessary to include file lists in the description without wrapping them as a single paragraph. Now we don't include file lists and it is not needed. commit 39e9bec12b3b8fcd02bda9721102b57e01a13106 Author: Stuart Hayhurst <stuart.a.hayhurst@gmail.com> Date: Sat Aug 10 01:32:52 2024 +0100 Add missing symlinks for tas2563 and tas2781
There are 9 open security issues in bookworm.
You can find information about how to handle these issues in the security team's documentation.
Among the 2 debian patches available in version 20240709-1 of the package, we noticed the following issues: