
Like each month, have a look at the work funded by
Freexian s Debian LTS offering.
Some notable fixes which were made in LTS during the month of November include the
gnutls28 cryptographic library and the
freerdp2 Remote Desktop Protocol client/server implementation. The gnutls28 update was prepared by LTS contributor Markus Koschany and dealt with a timing attack which could be used to compromise a cryptographic system, while the freerdp2 update was prepared by LTS contributor Tobias Frost and is the result of work spanning 3 months to deal with dozens of vulnerabilities.
In addition to the many ordinary LTS tasks which were completed (CVE triage, patch backports, package updates, etc), there were several contributions by LTS contributors for the benefit of Debian stable and old-stable releases, as well as for the benefit of upstream projects. LTS contributor Abhijith PA uploaded an update of the puma package to unstable in order to fix a vulnerability in that package while LTS contributor Thosten Alteholz sponsored an upload to unstable of libde265 and himself made corresponding uploads of libde265 to Debian stable and old-stable. LTS contributor Bastien Roucari s developed patches for vulnerabilities in zbar and audiofile which were then provided to the respective upstream projects. Updates to packages in Debian stable were made by Markus Koschany to deal with security vulnerabilities and by Chris Lamb to deal with some non-security bugs.
As always, the LTS strives to provide high quality updates to packages under the direct purview of the LTS team while also rendering assistance to maintainers, the stable security team, and upstream developers whenever practical.
Debian LTS contributors
In November, 18 contributors have been paid to work on Debian
LTS, their reports are available:
- Abhijith PA
did 7.0h (out of 0h assigned and 14.0h from previous period), thus carrying over 7.0h to the next month.
- Adrian Bunk
did 15.0h (out of 14.0h assigned and 9.75h from previous period), thus carrying over 8.75h to the next month.
- Anton Gladky
did 10.0h (out of 9.5h assigned and 5.5h from previous period), thus carrying over 5.0h to the next month.
- Bastien Roucari s
did 16.0h (out of 18.25h assigned and 1.75h from previous period), thus carrying over 4.0h to the next month.
- Ben Hutchings
did 12.0h (out of 16.5h assigned and 12.25h from previous period), thus carrying over 16.75h to the next month.
- Chris Lamb
did 18.0h (out of 17.25h assigned and 0.75h from previous period).
- Emilio Pozuelo Monfort
did 15.5h (out of 23.5h assigned and 0.25h from previous period), thus carrying over 8.25h to the next month.
- Guilhem Moulin
did 13.0h (out of 12.0h assigned and 8.0h from previous period), thus carrying over 7.0h to the next month.
- Lee Garrett
did 14.5h (out of 16.75h assigned and 7.0h from previous period), thus carrying over 9.25h to the next month.
- Markus Koschany
did 30.0h (out of 30.0h assigned).
- Ola Lundqvist
did 6.5h (out of 8.25h assigned and 15.5h from previous period), thus carrying over 17.25h to the next month.
- Roberto C. S nchez
did 5.5h (out of 12.0h assigned), thus carrying over 6.5h to the next month.
- Santiago Ruano Rinc n
did 3.25h (out of 13.62h assigned and 2.375h from previous period), thus carrying over 12.745h to the next month.
- Sean Whitton
did 3.25h (out of 10.0h assigned), thus carrying over 6.75h to the next month.
- Sylvain Beucler
did 10.0h (out of 13.5h assigned and 10.25h from previous period), thus carrying over 13.75h to the next month.
- Thorsten Alteholz
did 14.0h (out of 14.0h assigned).
- Tobias Frost
did 12.0h (out of 12.0h assigned).
- Utkarsh Gupta
did 0.0h (out of 6.0h assigned and 17.75h from previous period), thus carrying over 23.75h to the next month.
Evolution of the situation
In November, we have released 35 DLAs.