Hi Sylvain, Santiago, and the rest of the LTS team, Sylvain, thank you for the straight advice, both on starting out in unstable and on how much of a security update is regression testing rather than the patch itself. I'll keep that in mind.
One practical follow-up on git-lfs (CVE-2025-26625), the one with the bookworm apt-get dist-upgrade regression Santiago described. The backport is on Salsa as go-team/packages/git-lfs MR !5, against debian/bookworm-security, and Stephen Gelman has reviewed and approved it there. The signed debdiff is in my message of 15 September in this thread. I'm not a DD, so I can't upload it myself. Could someone on the LTS team take it from here, either by uploading it or by telling me what further testing you'd want to see first? I'm glad to do that work. Thanks, Ivo
