In June 2026 I've worked on the below listed packages for Freexian (E)LTS [1]. This is my sixteenth month involved with the (E)LTS efforts.
Many thanks to Freexian and our sponsors [2] for providing this opportunity! # Packages sudo ==== I backported the upstream fix for CVE-2026-35535 to bullseye and released [DLA-4614-1]. jq == A new CVE has appeared and I backported the upstream fix to bullseye on top of the previous CVE fix that I already pushed after forgetting about including it in my last upload. (Additional security advisories exists and have been fixed in unstable, but don't have CVEs assigned to them. New issues seems to be coming in continuously.) Upload still pending. u-boot ====== After discussing with maintainer I uploaded a NMU to sid fixing the two outstanding CVEs by backporting them from upstream. Since unstable, testing and stable still has the same upstream version, this seemed like a good way to give confidence in the backported patches before proposing them as a stable-propased-update (SPU). Updating to a newer upstream version in sid/unstable was left for later. See [u-boot-sid-nmu] for further info. Updated versions for bookworm and bullseye (LTS) has been uploaded and announced as [DLA-4642-1]. An updated package for trixie has also been prepared and a stable-proposed-update (SPU) bug report has been opened #1140663 and pending stable-release-managers (SRM) ack before upload. atril ===== Uploaded the updates I had prepared for bookworm and trixie with the ACK from security team. Announced bookworm update as [DLA-4632-1]. libmatio ======== Prepared updated package for bookworm to match updates previously done in bullseye, uploaded and announced as [DLA-4644-1]. See discussion in [libmatio-bookworm]. # Other (Attended LTS Team meeting on jitsi.) # References [1] https://www.freexian.com/lts/ [2] https://www.freexian.com/lts/debian/#sponsors [DLA-4614-1] https://lists.debian.org/debian-lts-announce/2026/06/msg00003.html [DLA-4632-1] https://lists.debian.org/debian-lts-announce/2026/06/msg00021.html [u-boot-sid-nmu] https://tracker.debian.org/news/1763432/accepted-u-boot-202501-32-source-into-unstable/ [DLA-4642-1] https://lists.debian.org/debian-lts-announce/2026/06/msg00031.html [DLA-4644-1] https://lists.debian.org/debian-lts-announce/2026/06/msg00033.html [libmatio-bookworm] https://salsa.debian.org/lts-team/lts-updates-tasks/-/work_items/319
