During the month of September 2026 and on behalf of Freexian, I worked on the following:
### openssl / LTS (bookworm) Uploaded `3.0.22-1~deb12u1` in Debian LTS, issued DLA-4795-1, fixing: * CVE-2026-42767 * CVE-2026-54874 * CVE-2026-63072 * CVE-2026-63074 * CVE-2026-63076 * CVE-2026-75803 During testing of this new version, a regression was identified in the `nodejs` test suite, caused by a change in OpenSSL behavior (more specifically <https://github.com/openssl/openssl/pull/32427/>). This was fixed in `nodejs` by <https://github.com/nodejs/node/commit/28b571c38af5>, so I backported this patch for bookworm as well. ### perl / LTS (bookworm) Work in progress to fix numerous CVEs, I'm now waiting for the (extensive) QA to finish before I can upload to bookworm, probably by end of week, or next week at the latest. Some CVEs also affect `libio-compress-perl`, also waiting to clear the QA before it can be uploaded. ### Thanks Thanks to our sponsors for making this possible, and to Freexian for handling the offering: <https://www.freexian.com/lts/debian/#sponsors>. -- Arnaud
