In June 2025 I've worked on the below listed packages for Freexian LTS/ELTS [1]. This is my forth month and unfortunately this month was also plagued by lack of time.
Many thanks to Freexian and our sponsors [2] for providing this opportunity! LTS ==== sslh: I looked into the 2 outstanding CVEs listed as needing attention, investigated how to reproduce and since the listed fixes where not straight-forward to backport I investigated the code to conclude the listed fixes where adressing problems that where introduced after the version of sslh in buster (oldstable) and bookworm (stable). Thus the result was no action except documenting the findings and removing sslh from the list of packages needing attention. golang-golang-x-net: I worked on backporting patches fixing outstanding issues and published a branch it the mantainers git repo. An updated package has not yet been finalized and uploaded, as it might need a second look through but most importantly since golang are statically linked there needs to be binNMUs for reverse dependencies. I still need to investigate how this is handled. ELTS ===== No ELTS work this month. Regards, Andreas Henriksson [1] https://www.freexian.com/lts/ [2] https://www.freexian.com/lts/debian/#sponsors
signature.asc
Description: PGP signature
