I've worked during july on the below listed packages, for Freexian
LTS/ELTS [1]

Many thanks to Freexian and our sponsors [2] for providing this opportunity!


imagemagick
--------------------

Release two DLA:
DLA 4680-1 fixing:
CVE-2026-53466 CVE-2026-53467 CVE-2026-55577 CVE-2026-55594 
 CVE-2026-55595 CVE-2026-55597 CVE-2026-55628 CVE-2026-56361 
CVE-2026-56363 CVE-2026-56365 CVE-2026-56366 CVE-2026-56367 
CVE-2026-56368 CVE-2026-56370 CVE-2026-56371 CVE-2026-56373 
CVE-2026-56376 CVE-2026-56377 CVE-2026-56378

DLA 4696-1 fixing
CVE-2026-61464 CVE-2026-61465 CVE-2026-61857 CVE-2026-61858 
CVE-2026-61859 CVE-2026-61860 CVE-2026-61862 CVE-2026-61863 
CVE-2026-61864 CVE-2026-61865 CVE-2026-61866 CVE-2026-61868 
CVE-2026-61869 CVE-2026-61870 CVE-2026-61872

DSA 6383-1 fixing
CVE-2026-53466 CVE-2026-53467 CVE-2026-55577 CVE-2026-55594 
CVE-2026-55597 CVE-2026-55628 CVE-2026-56361 CVE-2026-56363 
CVE-2026-56364 CVE-2026-56365 CVE-2026-56367 CVE-2026-56368 
 CVE-2026-56370 CVE-2026-56371 CVE-2026-56376 CVE-2026-56377 
 CVE-2026-56378

Proposed a PU fixing remaining CVE #1142554 trixie-pu: package 
imagemagick/8:7.1.1.43+dfsg1-1+deb13u12

For ELTS I released ELA-1766-1, ELA-1768-1 , ELA-1776-1, ELA-1778-1, ELA-1789-1


As usual with imagemagick progress was slow due to being ported between two 
majors version.

Review
-----------

Review patches for bind buster

Bind
------

I proposed ELA-1786-1 fixing  CVE-2025-8677 CVE-2026-1519 CVE-2026-3039 
CVE-2026-3592 CVE-2026-5946 CVE-2026-5950 CVE-2026-10723 CVE-2026-11622 
CVE-2026-11721 CVE-2026-13204 CVE-2026-13321

Apache2
-------------

ELA-1765-1 apache2 fixing for stretch CVE-2026-29167 CVE-2026-29170 
CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 
CVE-2026-44119 CVE-2026-44185 CVE-2026-44186 CVE-2026-44631 CVE-2026-48913

ca-certificates
---------------------

i proposed to update from trixie ca-certificates. Bookworm/bullseyse fixes are 
under review

Various
-----------

I have attented monthly meeting
I merged some part of salsaCI LTS pipeline to main pipeline

Cheers

rouca

[1]  https://www.freexian.com/lts/
[2]  https://www.freexian.com/lts/debian/#sponsors

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to