In August I was assigned 13.25 hours of work by Freexian's Debian
LTS initiative and carried over 6 hours from earlier months. I
worked 1.25 hours and will carry over the remainder.
I attended an LTS team meeting, and wrote my report for July 2021,
but did not work on any updates.
In July I was assigned 16 hours of work by Freexian's Debian LTS
initiative and carried over 2.75 hours from earlier months. I worked
12.75 hours and will carry over the remainder.
I applied some urgent (and some not-so-urgent) security fixes to the
linux (Linux 4.9), uploaded it, and issued
DLA-2713-2.
I also updated the linux-4.19 package based on the stable security
update, and issued
DLA-2714-1.
In June I was assigned 14 hours of work by Freexian's Debian LTS
initiative and carried over 2 hours from earlier months. I worked
13.25 hours and will carry over the remainder.
I finished bringing the linux (Linux 4.9) package up to date,
uploaded it, and issued
DLA-2689-1.
I also updated the linux-4.19 package based on the version in stable
point release 10.10, and issued
DLA-2690-1.
Finally, I backported my recent security fixes for klibc, uploaded
it and issued
DLA-2695-1.
In May I was assigned 13.5 hours of work by Freexian's Debian LTS
initiative and carried over 4.5 hours from earlier months. I worked
16 hours and will carry over the remainder.
I finished reviewing the futex code in the PREEMPT_RT patchset for
Linux 4.9, and identified several places where it had been
mis-merged with the recent futex security fixes. I sent a patch for
these upstream, which was accepted and applied in v4.9.268-rt180.
I have continued updating the Linux 4.9 package to later upstream
stable versions, and backported some missing security fixes. I have
still not made a new upload, but intend to do so this week.
In April I was assigned 16 hours of work by Freexian's Debian LTS
initiative and carried over 2.5 hours from earlier months. I worked
14 hours and will carry over the remainder.
I spent a long time trying to verify that the futex issue in was now
properly fixed in Linux 4.9, and reviewing the merge of these
changes with the real-time (PREEMPT_RT) kernel patchset.
Unfortunately this work is not complete and I did not make another
upload this month.
In March I was assigned 16 hours of work by Freexian's Debian LTS
initiative and carried over 12.25 hours from earlier months. I
worked 25.75 hours and will carry over the remainder.
I eventually settled on an apparently working patch series to fix
the futex security issue in Linux 4.9. This went through upstream
stable review and was included in 4.9.260. I applied the same fixes
to the Debian package, along with some other security and regression
fixes. I uploaded it and issued
DLA-2586-1.
Unfortunately the futex changes for Linux 4.9 still caused a
regression (kernel WARNING in some circumstances). I worked to
backport and test a further set of fixes that had already been
applied to later kernel branches. These were included in upstream
stable release 4.9.264 and should go into an updated Debian package
soon.
Following the Debian 10.9 point release, I also backported the
updated Linux 4.19 package. I uploaded it and issued
DLA-2610-1.
In January was assigned 7 hours of work by Freexian's Debian LTS
initiative and carried over 8.5 hours from earlier months. However,
I only used 0.25 hours of these to write December's report. In
Feburary I was assigned another 16 hours to work, and have worked
19 hours. I will carry over the remaining hours to March.
I uploaded a Linux 4.19 package update based on the recent security
update for Debian 10 "buster", and issued
DLA-2557-1
for this. I spent most of my time working on an update for Linux
4.9. However, some of the recent security fixes are not yet in a
fully working state, so I have not been able to upload an update
yet.
Like each month, have a look at the work funded by Freexian s Debian LTS offering.
Debian project funding
In January, we put aside 2175 EUR to fund Debian projects.
As part of this Carles Pina i Estany started to work on
better no-dsa support for the PTS
which recently resulted in two
merge
requests which will hopefully be deployed soon.
We re looking forward to receive more projects from various
Debian teams! Learn more about the rationale behind this initiative in this article.
Debian LTS contributors
In January, 13 contributors have been paid to work on Debian LTS, their reports are available:
Like each month, have a look at the work funded by Freexian s Debian LTS offering.
Debian project funding
In December, we put aside 2100 EUR to fund Debian projects. The first project proposal (a tracker.debian.org improvement for the security team) was received and quickly approved by the paid contributors, then we opened a request for bids and the bid winner was announced today (it was easy, we had only one candidate). Hopefully this first project will be completed until our next report.
We re looking forward to receive more projects from various Debian teams! Learn more about the rationale behind this initiative in this article.
Debian LTS contributors
In December, 12 contributors have been paid to work on Debian LTS, their reports are available:
I was assigned 16 hours of work by Freexian's Debian LTS initiative
and carried over 9 hours from earlier months. I worked 16.5 hours this
month, so I will carry over 8.5 hours to January.
(Updated: corrected number of hours worked.)
I updated linux-4.19 to include the changes in the Debian 10.7 point
release, uploaded the package, and issued
DLA-2483-1
for this.
I picked some regression fixes from the Linux 4.9 stable branch to
the linux package, and uploaded the package. This unfortunately
failed to build on arm64 due to some upstream changes uncovering an
old bug, so I made a second upload fixing that. I issued
DLA-2494-1
for this.
I updated the linux packaging branch for stretch to Linux 4.9.249,
but haven't made another package upload yet.
Like each month, here comes a report about the work of paid contributors to Debian LTS.
Individual reports
In November, 239.25 work hours have been dispatched among 13 paid contributors. Their reports are available:
One comment Liked this article? Click here. My blog is Flattr-enabled.
I was assigned 16 hours of work by Freexian's Debian LTS initiative
and carried over 4.5 hours from earlier months. I worked 11.5 hours
this month, so I will carry over 9 hours to December.
I continued working on backporting fixes for some less urgent
security issues in Linux 4.9. I had to give up on some filesystem
fixes as they caused regressions. The others have now been applied
to the 4.9 stable branch at kernel.org.
I updated the linux packaging branch for stretch to Linux 4.9.246,
but haven't made a new package upload yet.
Like each month, here comes a report about the work of paid contributors to Debian LTS.
Individual reports
In October, 221.50 work hours have been dispatched among 13 paid contributors. Their reports are available:
No comment Liked this article? Click here. My blog is Flattr-enabled.
I was assigned 6.25 hours of work by Freexian's Debian LTS
initiative and carried over 17.5 hours from earlier months. I
worked 11.5 hours this month and returned 7.75 hours to the pool, so
I will carry over 4.5 hours to December.
I updated linux-4.19 to include the changes in
DSA-4772-1,
and issued
DLA-2417-1
for this.
I updated linux (4.9 kernel) to include upstream stable fixes,
and issued
DLA-2420-1.
This resulted in a regression on some Xen PV environments. Ian
Jackson identified the upstream fix for this, which had not yet
been applied to all the stable branches that needed it. I made a
further update with just that fix, and issued DLA-2420-2.
I have also been working to backport fixes for some less urgent
security issues in Linux 4.9, but have not yet applied those fixes.
Next.