Debian LTS and ELTS - September 2022

[Sylvain Beucler <beuc@beuc.net>]

Here is my public monthly report.

Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/services/debian-lts.html#sponsors


LTS

- Front Desk
  - Standardize/clarify buster-lts triage for golang* packages
  - Mark 10 packages for update
  - Triage or precise triage for multiple CVEs
  - Guide two non-team contributors (bzip2 and pcs)
    https://lists.debian.org/debian-lts/2022/09/msg00042.html
    https://lists.debian.org/debian-lts/2022/09/msg00060.html

- nodejs
  - Newly supported package / ecosystem
  - Reference CVEs information and patches, precise buster triage
  - Prepare DLA (in progress), backport patches
  - Fix test-suite, initiate documentation (see below)


ELTS

- Front Desk
  - Mark 3 supported packages for update
  - Associate CVEs from newer separate branched 'golang-1.x' packages
    to ELTS' 'golang'


Documentation and tooling

- LTS Documentation
  - Clarify package claims and front-desk bypass procedures
    https://lts-team.pages.debian.net/wiki/LTS-Development.html#claim-the-issue-in-the-security-tracker-in-dla-needed-txt
    https://salsa.debian.org/lts-team/lts-extra-tasks/-/issues/49
  - Unify front-desk docs (public and private), clarify role attributions
    https://lts-team.pages.debian.net/wiki/LTS-Development.html#front-desk-duties
    https://salsa.debian.org/lts-team/lts-extra-tasks/-/issues/48
  - Discuss triage during stable->oldstable harmonization
    https://lists.debian.org/debian-lts/2022/09/msg00072.html
  - nodejs testing procedures
    https://lts-team.pages.debian.net/wiki/TestSuites/nodejs.html
  - Internal doc: reference bin/review-update-needed from the main
    security-tracker, similar to a new tool

- Fixes to new (private) bin/package-operations front-desk tooling

- IRC meeting
  http://meetbot.debian.net/debian-lts/2022/debian-lts.2022-09-22-13.58.html


-- 
Sylvain Beucler
Debian LTS Team