Here is my public monthly report.
Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/services/debian-lts.html#sponsors
LTS
– openexr
– wrap-up work started in June
– DLA 2701-1
https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html
– clear embedded status for freeimage
– global triage: analyze new vulnerabilities (end of July)
– libxstream-java
– wrap-up work started in June
– DLA-2704-1
https://lists.debian.org/debian-lts-announce/2021/07/msg00004.html
– php7.0
– global CVEs triage: reference more embedded copies and fixes
– backport firebird test server
– DLA 2708-1
https://lists.debian.org/debian-lts-announce/2021/07/msg00008.html
– ruby-actionpack-page-caching: DLA 2719-1
https://lists.debian.org/debian-lts-announce/2021/07/msg00019.html
– CVEs triage: roundcube, golang-1.7, golang-1.8
ELTS
– openexr
– common work with LTS
– ELA 453-1
https://deb.freexian.com/extended-lts/updates/ela-453-1-openexr/
– libxstream-java
– common work with LTS
– ELA-455-1
https://deb.freexian.com/extended-lts/updates/ela-455-1-libxstream-java/
– php5
– common work with LTS
– ELA-457-1
https://deb.freexian.com/extended-lts/updates/ela-457-1-php5/
– CVEs triage: golang
Documentation and tooling
- Report issue when running all PHP test suites
https://bugs.debian.org/991008
- Document more test procedures
https://wiki.debian.org/LTS/TestSuites/libxstream-java
https://wiki.debian.org/LTS/TestSuites/php
https://wiki.debian.org/LTS/TestSuites/openexr#oss-fuzz
- Document combined asan+ubsan sanitizers
https://wiki.debian.org/LTS/Development/Asan
- Tasks: clarifications
https://salsa.debian.org/lts-team/lts-extra-tasks/-/issues/3
https://salsa.debian.org/lts-team/lts-extra-tasks/-/issues/13
- bin/lts-needs-forward-port.py: fix, answer contributor query
https://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/2021-July/092987.html
--
Sylvain Beucler
Debian LTS Team
