On Fri, May 07, 2021 at 11:19:19AM +0100, John Winters wrote:
On 07/05/2021 11:06, Adam Spiers wrote:
That list suggests that only sid (unstable),
bullseye (testing), and
buster-backports have a fix.
Debian don't upgrade versions, they backport fixes to the version in a
release.
From the Debian security mailing list:
For the stable distribution (buster), these problems
have been fixed in version 4.92-8+deb10u6.
Ah OK, thanks. It's a shame that LWN article didn't list fixed
versions for each distro; that best practice is normally followed for
vulnerability announcements.