Here is my public monthly report.
Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/lts/debian/#sponsors
LTS
- 7z/p7zip
- p7zip Old-Stable Point Update (OSPU) released with Debian 12.15
(so was 7zip/bookworm, but not 7zip/trixie)
https://www.debian.org/News/2026/2026071102
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138185#42
- Reference missing OSPU fixes in the security tracker
- DLA-4681-1 for p7zip/bullseye
https://lists.debian.org/debian-lts-announce/2026/07/msg00022.html
- Investigate new vulnerabilities
https://lists.debian.org/debian-lts/2026/07/msg00038.html
- Front Desk (week 29 2026)
- High activity with bookworm LTS hand-over
- Mark 41 packages for update, drop 1 package
- Triage or precise bullseye triage for ~120 CVEs
- Tidy work queue and team package information for 3 packages
- Revisit triage for CVE-2026-50811/freetype at secteam's request,
identify introductory commit to validate prior week FD's triage
- Update/close some (O)SPU tasks
https://salsa.debian.org/lts-team/lts-updates-tasks/-/work_items?label_name%5B%5D=%28O%29SPU
- dhcpcd5: answer questions and review update from maintainer
Sponsor DLA-4686-1
https://lists.debian.org/debian-lts/2026/07/msg00048.html
https://lists.debian.org/debian-lts-announce/2026/07/msg00028.html
- Answer modsecurity update proposal
https://lists.debian.org/debian-lts/2026/07/msg00066.html
ELTS
- rsync
- Finalize work from past month
- Review/exchange with past DLA uploader
- ELA-1767-1
https://www.freexian.com/lts/extended/updates/ela-1767-1-rsync/
- Follow-up and merge testsuite improvement for Debian sid
https://salsa.debian.org/debian/rsync/-/merge_requests/40
- Front Desk (week 21 2026)
- Mark 5 supported packages for update, drop 1 package
- Triage or precise triage for ~20 CVEs
- Tidy work queue and update status for 2 packages
- Associate CVEs from newer, branched Debian packages with different
names to older ELTS packages (gnupg*, golang*, libidn*, libxfont*,
netty*, openssl*, php*, python*, ruby*, setuptools*, sqlite*,
squid*, tomcat*); reference libxfont/libxfont1
- Clean-up obsolete and unimportant-priority ELTS entries
- Investigate and drop incorrect past sudo triage with joschen
Common documentation and tooling
- Public documentation
- Development
- bookworm 12.15 is out, drop LTS/OSPU conflict notes
- Announce the update: DLA proofreading / checklist,
move up official documentation links
https://lts-team.pages.debian.net/wiki/Development.html#announce-the-update
- Clarify some steps for casual contributors
https://lts-team.pages.debian.net/wiki/Development.html#shortcut-7-steps-for-publishing-a-dla
- Add emphasis on Git tagging
https://lts-team.pages.debian.net/wiki/Development.html#publish-the-git-repository-and-tags
- TestSuites: rsync: new entry
https://lts-team.pages.debian.net/wiki/TestSuites/rsync.html
- Debian Wiki: Debusine: Full --local-file example
https://wiki.debian.org/DebusineDebianNet?action=diff&rev2=56&rev1=54
- June recap
https://lists.debian.org/debian-lts/2026/07/msg00058.html
- Private documentation
- ELTS upload: move QA details to debusine section; summarize;
provide full example
- Tooling
- cvehist
Commit message: fix trailer grouping; handle no trailing newline
Investigate rewriting and optimizing the ELTS repository, which
has additional constraints
https://salsa.debian.org/lts-team/cvehist
- Review ./find-work pager (à la git-log)
https://gitlab.com/freexian/services/deblts-team/debian-lts/-/merge_requests/68
- bin/lts-cve-triage.py
Delegate tty detection to python3-termcolor only; simplify output code
- Review gen-DSA check for specific placeholder left-over
https://salsa.debian.org/security-tracker-team/security-tracker/-/merge_requests/310
- Investigate multiple autopkgtest tooling failures
(autopkgtest-build-qemu, autopkgtest-virt-qemu, debusine incus-vm)
- bin/elts-trim-unimportant: drop unimportant postponed ELTS entries
- security-tracker status updates
https://lists.debian.org/debian-security-tracker/2026/07/msg00006.html
https://lists.debian.org/debian-lts/2026/07/msg00017.html
(on-going tests, further details later)
- Team & users help
- Clarify unsupported status for packages end-users
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138294#34
- Help re-assess wolfSSL/bookworm support situation
https://lists.debian.org/debian-lts/2026/07/msg00041.html
- Advise against base programming languages updates, even minor
https://lists.debian.org/debian-lts/2026/07/msg00073.html
- ELTS: answer about data/ADDITIONAL/ RFC (optimization suggestions)
- Team meeting (IRC)
https://meetbot.debian.net/debian-lts/2026/debian-lts.2026-07-16-14.00.html
--
Sylvain Beucler
Debian LTS Team
