Debian LTS and ELTS -- February 2024

2024-03-03 Thread Daniel Leidert
Hi, I was working mostly on runc this month, backporting the patches to fix and harden runc in Buster against CVE-2021-43784 and CVE-2024-21626, issueing DLA 3735-1. I also prepared the same patchset for runc for ELTS because it seemed that the version from Buster had been uploaded to Stretch.

Debian LTS and ELTS - February 2024

2024-03-01 Thread Sylvain Beucler
Here is my public monthly report. Thanks to our sponsors for making this possible, and to Freexian for handling the offering. https://www.freexian.com/lts/debian/#sponsors LTS - cacti - Finish triaging and backporting CVEs growing backlog - Update the security tracker with numerous

Debian LTS and ELTS -- February 2024

2024-02-29 Thread Sean Whitton
Hello, This was my eighth month working on LTS and ELTS. Thank you to Freexian and Freexian's sponsors for making these projects possible: LTS - libssh - Finished backporting fixes for CVE-2020-16135, CVE-2023-6004, CVE-2023-6918 and