For December I spent 12.75 hours on the following LTS tasks: - libapache-mod-jk: uploaded update prepared in November for CVE-2018-11759 and released assocaited advisory - php5: prepared update (new upstream version) to address CVE-2018-19518 and CVE-2018-19935, also uploaded and released associated advisory - uw-imap: reproduced CVE-2018-19518, developed mitigation, prepared patch, and requested guidance/review from LTS team and security team; maintainer has proposed an alternative; waiting on feedback - symfony: worked on adjusting patch for CVE-2018-19789 so that it works with older upstream version in jessie
I also spent 1.5 hours on the following ELTS tasks: - libapache-mod-jk: uploaded update prepared in November for CVE-2018-11759 and released assocaited advisory - php5: prepared update (backported patches) to address CVE-2018-19518 and CVE-2018-19935, also uploaded and released associated advisory Regards, -Roberto -- Roberto C. Sánchez
