you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 2 days ago (2 children)

If you are speaking about the latest php bug, debian stable and old stable were updated days ago, see https://security-tracker.debian.org/

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 days ago* (last edited 2 days ago) (1 child)

    it might be a failure to read on my part but this reads as unfixed on Debian but fixed on Arch

    Edit: Oh, yeah ok, in the security repo it's fixed, why is the vulnerable version distributed to stable though?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 2 days ago

    Technically, you are right. But this is due to the different release systems.

    In Debian, security updates for the stable version are distributed via the security repository until a new point release is created. The last point release was two months ago.

    However, in practice, on Debian Trixie, you get the fixed version by running a standard apt update & apt upgrade.

  • source
  • parent