[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

My Squeeze LTS activites in May 2015



Hi there,

Last May, I was assigned with my first paid hours to work on Squeeze
LTS, thanks to the Freexian initiative. It has been an interesting and
enjoyable experience. This is how I have spend my 10.25 hours:

* dnsmasq: I've uploaded the 2.55-2+deb6u1 version [DLA 225-1] to fix the
  CVE-2015-3294
  [DLA 225-1] https://lists.debian.org/debian-lts-announce/2015/05/msg00009.html

  Note: There are two issues that won't be fixed because they depend on
  libvirt, which is no longer supported.

* tomcat6: I've uploaded the 6.0.41-2+squeeze7 version [DLA 232-1] to
  fix three CVEs.
  [DLA 232-1] https://lists.debian.org/debian-lts-announce/2015/05/msg00016.html

* fuse: I've adopted and tested the patch to fix #786439. I let the fuse
  maintainer to finish the upload by his request.

* zendframework: I've prepared the package to fix the following CVEs, thanks to
  patches from wheezy:

  https://security-tracker.debian.org/tracker/CVE-2014-2681
  https://security-tracker.debian.org/tracker/CVE-2014-2682
  https://security-tracker.debian.org/tracker/CVE-2014-2683
  https://security-tracker.debian.org/tracker/CVE-2014-2684
  https://security-tracker.debian.org/tracker/CVE-2014-2685
  https://security-tracker.debian.org/tracker/CVE-2014-4914
  https://security-tracker.debian.org/tracker/CVE-2014-8088
  https://security-tracker.debian.org/tracker/CVE-2014-8089
  https://security-tracker.debian.org/tracker/CVE-2015-3154

  But I am waiting some days to allow users to test it. The package is
  available at the repository:

  deb https://people.debian.org/~santiago/debian santiago-squeeze-lts/

  So please give it a try if you can!

Thanks for everyone contributing on Squeeze LTS, in whatever form!

Cheers,

Santiago

Attachment: signature.asc
Description: Digital signature


Reply to: