Hi everyone,
in October I worked on dnsmasq in bullseye, manually verifying via the proof of
concept provided by the original security researchers that the patches applied
previous month fix the security issues. During the LTS review process some
smaller issues were identified and changed, and the package was released.
I also fixed CVE-2023-50387 and CVE-2023-50868 ("keytrap" and "NSEC3" security
issues) in dnsmasq buster, and got acquainted with the release process for ELTS.
I also reviewed the bookworm update for ansible by Bastien Roucariès.
Thanks to our sponsors for financing this work, and to Freexian for
coordinating!
Regards,
Lee Garrett,
Debian LTS Team
