> 
> You don't get security updates for backport kernels, so I'd strongly
> oppose it if you're running an exposed server.  But for a desktop system
> in a normal kind of setup (behind a firewall, or on a private network)
> it should be within reasonable expectations of security.


Huh, this is an interesting information! I wondered, why there was no new 
bpo-kerrnel 
after the discovery of CVE-2023-6546 in April. Kernel 6.1.0- got an update, but 
6.5.0-bpo 
NOT. 

My question in the forum about this was not stisfactionally answered. But now 
we now: 
CVE-2023-6546 is still in 6.5.0-bpo!

Thanks for the advice.

Best

Hans

Reply via email to