Hi, The two commits listed in the security tracker:
aaa9fd6bbc2d "broker/main: bump RLIMIT_NOFILE to hard limit" (src/broker/main.c, src/util/misc.c, src/util/misc.h) c4a3c886366f "bus/peer: account peer-pidfd on peers" (src/bus/peer.c) are on main and in no release tag yet. Applied in that order to unstable 37-5 and trixie 37-2 (sources from https://www.google.com/url?q=http://sources.debian.org&source=gmail&ust=1793800252912000&sa=E ): aaa9fd6b applies with fuzz 1, c4a3c886 with offsets +3 on both versions. Mechanical patch-applies check only; not built or tested. Because of the fuzz on aaa9fd6b, the result is worth checking. Regards

