(E)LTS report for October 2023

2023-11-04 Thread Adrian Bunk
LTS: poppler: - Confirmed that CVE-2020-18839 is a duplicate of CVE-2020-27778 - Released DLA-3620-1, fixing CVE-2020-23804 CVE-2022-37050 CVE-2022-37051 - PoCs for all 3 CVEs were confirmed to be present in the unfixed version and fixed in the fixed version krb: - Released DLA-3626-1, fixing

Debian (E)LTS report for October 2023

2023-11-02 Thread Lee Garrett
Hi everyone, In October I published the initial version of ftf (functional test framework) and fixed many things thanks to Santiago's feedback. It is now published at https://gitlab.com/lgarrett/ftf. I also spent time continuing work on samba, triaging the remaining CVEs and preparing an

(E)LTS report for October 2023

2023-11-01 Thread Tobias Frost
I've worked during October 2023 on the below listed packages, for Freexian LTS/ELTS [1] Many thanks to Freexian and sponsors [2] for providing this opportunity! ELTS: firmware-nonfree - ELA-981-1 This was a contiunation of DLA-3596-1, which I've released in September, this time for

(E)?LTS report for october

2023-10-31 Thread Bastien Roucariès
I've worked during September 2023 on the below listed packages, for Freexian LTS/ELTS [1] Many thanks to Freexian and our sponsors [2] for providing this opportunity! LTS === prometheus-alertmanager --- I have released DLA 3609-1 following fixes from

(E)LTS report for October 2022

2022-10-29 Thread Dominik George
Hi, in October 2022, on behalf of Freexian and through my company velocitux UG, I have worked on the following (E)LTS tasks: ELA-717-1: freerdp == Finished the upload of the update for freerdp after quite tiresome backporting activites. FreeRDP 1 is a challenging package,

(E)LTS report for October 2021

2021-11-01 Thread Holger Levsen
hi, in October 2021 I spent 1h coordinating the hand-over of my activities to Jeremiah: - mail and irc communication, incl. - coordinating with Jeremiah - explaining stuff to Jeremiah I expect this was my last month as an active LTS contributor for the immediate future. (However for now

(E)LTS report for October

2020-11-10 Thread Emilio Pozuelo Monfort
Hi, During the month of October, I spent 20.75h on LTS: - investigated and addressed security-tracker corruption - golang-go.crypto analysis and advice - thunderbird 78 ESR update - investigated and fixed thunderbird armhf build failure - investigated thunderbird l10n bug report - mariadb-10.1

(E)LTS report for October 2020

2020-11-01 Thread Holger Levsen
hi, in October 2020 I spent 7h managing (E)LTS contributors: - dispatching work hours for LTS and ELTS - preparing and post-processing the monthly team meeting - preparing the monthly Freexian blog post published on raphaelhertzog.com - mail and irc communication, incl. - semi-automatic

Re: (E)LTS report for October

2019-11-14 Thread Holger Levsen
On Tue, Nov 12, 2019 at 11:03:17AM +0100, Sylvain Beucler wrote: > I believe it's a matter of magnitude: the doc's example is about a 10% > excess, while this was about a ~200% excess. this, exactly. > Coordination allows to average the workload and reactivity, for instance > by adding more

Re: (E)LTS report for October

2019-11-12 Thread Sylvain Beucler
Hi, On 10/11/2019 21:41, Brian May wrote: > Holger Levsen writes: > >> then, just for the record, this was discussed with Raphael and me. Please >> don't do more hours than assigned without coordination. See "What should >> I do if I work more than the hours allocated?" in debian-lts.git for >>

Re: (E)LTS report for October

2019-11-10 Thread Brian May
Holger Levsen writes: > then, just for the record, this was discussed with Raphael and me. Please > don't do more hours than assigned without coordination. See "What should > I do if I work more than the hours allocated?" in debian-lts.git for > more info. Huh? I don't see anything about

Re: (E)LTS report for October

2019-11-10 Thread Holger Levsen
Hi, first: thanks for your work and the report, Emilio! On Sun, Nov 10, 2019 at 11:07:02AM +0100, Emilio Pozuelo Monfort wrote: > Since the hours spent on LTS were higher than my allotted time, my November > hours will be used for that, as well as a few from ELTS, and I will work on > the >

(E)LTS report for October

2019-11-10 Thread Emilio Pozuelo Monfort
Hi, During the month of October I spent 72 hours on finishing the Firefox ESR 68 update. That update took so much time due to the necessary toolchain updates, which included rust & cargo, LLVM, and GCC, and to several issues which were encountered with some of those components and with some old

(E)LTS report for October

2018-11-11 Thread Emilio Pozuelo Monfort
Hi, For October, I spent 12h working on LTS on the rustc/cargo bootstrap My original approach showed some problems, so I attempted to follow the approach taken for stretch, reusing old packages from snapshot.debian.org. In the end that brought its own set of problems due to those old packages