Debian CVEs

Debian CVEs

How to Read CVEs Example

Example CVE https://security-tracker.debian.org/tracker/CVE-2023-24329

Note fixed status lines

https://serverfault.com/questions/1121793/debian-security-release

The bullseye (security) release refers to the most recent bullseye release with the available security patches installed.

There is apt source configured for the security patches in the official release (see the /etc/apt/sources.list file). The currently available security patches can be installed using apt-get, which is usually a good idea, since there might be some new patches available since the time of the last official release:

apt-get --yes update && apt-get --yes upgrade
which can be done in a Dockerfile as well:

RUN apt-get --yes update && apt-get --yes upgrade
After running these commands, the security patches are installed.