LTS/ELTS Report for December 2018

[Roberto C. Sánchez <roberto@debian.org>]

For December I spent 12.75 hours on the following LTS tasks:

- libapache-mod-jk: uploaded update prepared in November for
  CVE-2018-11759 and released assocaited advisory
- php5: prepared update (new upstream version) to address CVE-2018-19518
  and CVE-2018-19935, also uploaded and released associated advisory
- uw-imap: reproduced CVE-2018-19518, developed mitigation, prepared
  patch, and requested guidance/review from LTS team and security team;
  maintainer has proposed an alternative; waiting on feedback
- symfony: worked on adjusting patch for CVE-2018-19789 so that it works
  with older upstream version in jessie

I also spent 1.5 hours on the following ELTS tasks:

- libapache-mod-jk: uploaded update prepared in November for
  CVE-2018-11759 and released assocaited advisory
- php5: prepared update (backported patches) to address CVE-2018-19518
  and CVE-2018-19935, also uploaded and released associated advisory

Regards,

-Roberto

--
Roberto C. Sánchez