Debian LTS and ELTS - March 2022

[Sylvain Beucler <beuc@beuc.net>]

Here is my public monthly report.

Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/services/debian-lts.html#sponsors


LTS

- cacti
  - harmonize with buster fixes, fix 8 CVEs, classify 5 pending CVEs
    as not-affected
  - DLA 2965-1
    https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html

- CVEs triage (last half-week of the month)
  - Add 6 packages for update
  - Assess vulnerability status for 10 CVEs
  - Add precisions / tidy status


ELTS

- varnish: investigate CVE-2022-23959 for 4.0.x series
  https://varnish-cache.org/lists/pipermail/varnish-misc/2022-March/027136.html

- cacti
  - Common work with LTS
  - ELA-588-1
    https://deb.freexian.com/extended-lts/updates/ela-588-1-cacti/

- CVEs triage (last half-week of the month)
  - common work with LTS


Documentation and tooling

- LTS documentation: proofread / fix typo
  https://wiki.debian.org/LTS/Development

- ELTS documentation: newly-supported-packages: improve procedure


-- 
Sylvain Beucler
Debian LTS Team