Hello everyone, Here’s my report for the work I’ve done for Debian LTS and ELTS in September 2026.
Thanks to Freexian and sponsors for making this possible: https://www.freexian.com/lts/debian/#sponsors LTS and ELTS ============ expat I have backported fixed for most of the pending CVEs. Backporting a series of patches for CVE-2025-59375 enabled me to re-do the fixes for CVE-2026-45186 and CVE-2026-66046 and backport the relevant patches with very little merge conflicts. I have also started work on expat in ELTS, which I will continue in October. -- Cheers, Andrej
