Hello! I've worked on the packages mentioned below, for Freexian LTS/ELTS [1].
Many thanks to Freexian and our sponsors [2] for providing this opportunity! # LTS ## bind9 - Release DLA-4725-1 to fix CVE-2026-3039 CVE-2026-3592 CVE-2026-5946 CVE-2026-5950 CVE-2026-10723 CVE-2026-10822 CVE-2026-11331 CVE-2026-11605 CVE-2026-11622 CVE-2026-11721 CVE-2026-12617 CVE-2026-13204 CVE-2026-13321 in bullseye and bookworm. ## libssh2: - Mark CVE-2026-55200, CVE-2026-55199, CVE-2026-66033 and CVE-2026-66035 as not vulnerable in bullseye - Patches ready for release. Waiting for trixie-pu being accepted. ## python-httplib2 - Release patch for CVE-2026-59939 for trixie (DSA 6441-1) - Release DLA 4747-1 to fix CVE-2021-21240 and CVE-2026-59939 in bullseye - Release DLA 4748-1 to fix CVE-2026-59939 in bookworm ## pyasn1 - Work on CVE-2026-59884, CVE-2026-59885 and, CVE-2026-59886 patches. - Send trxie-pu #1145581. - Patches ready for release. Waiting for trixie-pu being accepted. # ELTS ## libssh2 - Mark CVE-2026-66035, CVE-2026-66034 and, CVE-2026-58050 as not affected for Buster and Stretch. - Patches ready for release. Waiting for trixie-pu being accepted. ## pyasn1 - Work on CVE-2026-59884, CVE-2026-59885 and, CVE-2026-59886 patches. - Pathes ready for release. Waiting for trixie-pu being accepted. ## python-httplib2 - Release ELA_1814-1 to fix CVE-2020-11078 CVE-2021-21240 CVE-2026-59939 for 0.9.2+dfsg-1+deb9u1 (stretch), 0.11.3-2+deb10u1 (buster) # Meetings - Attend the monthly LTS team meeting [1] https://www.freexian.com/lts/ [2] https://www.freexian.com/lts/debian/#sponsors -- cheers, Emmanuel Arias ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ [email protected] ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: 13796755BBC72BB8ABE2AEB5 FA9DEC5DE11C63F1 ⠈⠳⣄
signature.asc
Description: PGP signature
