LTS report for February 2019 - Abhijith PA
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
February 2019 was my 13th month as a Debian LTS paid contributor. I was
assigned 14 hours and I spend all of them for the following:
* mumble: Fixed CVE-2018-20743, tested and uploaded[1].
* drupal7: Continued working on CVE-2019-6338, which was kept aside due
to CVE-2018-1000888. Fixed, uploaded and released DLA[2]
* uploaded php5 to fix a security issue in php-pear.DLA[3]
* libsdl1.2 and libsdl2: There were 11 CVEs reported against both of
them. CVE-2019-7577 was reproducible and reported to upstream earlier
whose fix received yesterday[4] made this to delay the upload. Fixed
and released DLA[5][6]
Regards
Abhijith PA
[1] - https://lists.debian.org/debian-lts-announce/2019/02/msg00006.html
[2] - https://lists.debian.org/debian-lts-announce/2019/02/msg00032.html
[3] - https://lists.debian.org/debian-lts-announce/2019/02/msg00020.html
[4] - https://bugzilla.libsdl.org/show_bug.cgi?id=4492#c6
[5] - https://lists.debian.org/debian-lts-announce/2019/03/msg00015.html
[6] - https://lists.debian.org/debian-lts-announce/2019/03/msg00016.html
-----BEGIN PGP SIGNATURE-----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=FnWP
-----END PGP SIGNATURE-----
Reply to: