Hello everyone, Here’s my monthly report for the work I’ve done for Debian LTS and ELTS in April 2025.
Thanks to Freexian and sponsors for making this possible: https://www.freexian.com/lts/debian/#sponsors LTS === libnet-easytcp-perl I have uploaded an update for Net::EasyTCP Perl module to address the fact it relied on an insecure random number generator. libbssolv-perl A small but important update to the BSSolv Perl module narrowly missed the bullseye release, but prevented Open Build Service running on bullseye from working correctly with some Debian packages. I have uploaded this non-security fix to bullseye. This upload was not sponsored by Freexian. golang-github-gorilla-csrf I have uploaded the fix for this Go package and several other Go packages that embedded its code in the binaries. I plan to upload this to buster as well in May (if relevant), and potentially in bookworm. mbedtls I continued my work on an update to mbedtls. I intend to upload this update fixing a bunch of CVEs once I get it reviewed, and then do a follow-up upload with more fixes if I manage to backport them. ELTS ==== I haven’t done anything for ELTS this month, but in May I will focus on ELTS. -- Cheers, Andrej
