Debian LTS and ELTS - February 2023

[Sylvain Beucler <beuc@beuc.net>]

Here is my public monthly report.

Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/services/debian-lts.html#sponsors


LTS

- golang-github-opencontainers-selinux
  - Pre-requisite for runc update below
  - DLA 3322-1 
    https://lists.debian.org/debian-lts-announce/2023/02/msg00016.html

- runc
  - prepare security update for 4 CVEs
  - identify and coordonate CVE re-introduction with upstream project
    https://github.com/opencontainers/runc/issues/3751
  - give time for upstream to react, otherwise will publish a partial update

- apache2
  - review and test other contributor's (Lee) planned update
  - help debug issues with storing package history in Git

- python-werkzeug
  - DLA 3346-1
    https://lists.debian.org/debian-lts-announce/2023/02/msg00041.html

- Front Desk (week 49, February half)
  - Triage or precise triage for 5 CVEs
  - Coordinate administrative issue with DLA 3316-1
    (not-affected for postgresql < v12)


ELTS

- Help investigate pillow regression causing issue in python-django

- Review missing CVEs in renamed packages with other contributor (Adrian)

- Front Desk (week 49, February half)
  - Mark 7 supported packages for update
  - Associate CVEs from newer, branched emacs*, golang*, php7*,
    postgresql*, python3* and ruby* Debian packages to older ELTS
    packages (+ send internal note on caveat related to those entries)
  - Triage or precise triage for <10 CVEs


Documentation and tooling

- LTS Documentation 
  - TestSuites: golang: document rdep availability for rebuilds + clarifications
    https://lts-team.pages.debian.net/wiki/TestSuites/golang.html
  - TestSuites: autopkgtest: update for buster + clarifications
    https://lts-team.pages.debian.net/wiki/TestSuites/autopkgtest.html
  - TestSuites: php: fix syntax
    https://lts-team.pages.debian.net/wiki/TestSuites/php.html
  - Force-refresh publication after Salsa runner downtime

- ELTS Documentation (private)
  - information-for-extended-lts-contributors: emphasize common setup
    issue with security-tracker ELTS fork

- Newcomers help
  - Report misplaced commit
  - Answer questions on IRC (processes, packages priority)
  - Help identify/source LTS start date for debian-timeline

- Monthly meeting (using Jitsi)


-- 
Sylvain Beucler
Debian LTS Team