LTS report for November 2018 - Abhijith PA
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
November 2018 marked my 10th month as a Debian LTS paid contributor.
Also this is my first report as a Debian Developer. I didn't allocated
any hours for this month as I had 13 hours pending from last month and
I spend all of them on the following:
* squid3: Merged CVE-2016-3948 to DSA-3625-1 [fc1638e][1], fixed
CVE-2018-19132 and released DLA[2].
* icecast2: Fixed CVE-2018-18820 and released DLA[3]
* keepalived: Fixed CVE-2018-19115 and released DLA[4].
I made a slight mistake when releasing DLA, in package field I
mentioned icecast2 instead of keepalived. Sorry for the mix-up.
* libphp-phpmailer: Fixed CVE-2017-5223, CVE-2018-19296 and tested with
all the upstream tests manually.
* pdns-recursor: Fix for CVE-2018-14644 and CVE-2018-10851 contains
C++11 specific code. Completed porting those present in
CVE-2018-14644. Now started working on CVE-2018-10851.
* pdns: Started working on CVE-2018-10851.
Thanks to Chris Lamb and Markus Koschany for uploading the packages
and releasing DLA.
Regards
Abhijith PA
[1] - https://lists.debian.org/debian-lts/2018/12/msg00000.html
[2] - https://lists.debian.org/debian-lts-announce/2018/11/msg00032.html
[3] - https://lists.debian.org/debian-lts-announce/2018/11/msg00033.html
[4] - https://lists.debian.org/debian-lts-announce/2018/11/msg00034.html
-----BEGIN PGP SIGNATURE-----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=vi4v
-----END PGP SIGNATURE-----
Reply to: