Debian LTS and ELTS - August 2025

[Sylvain Beucler <beuc@beuc.net>]

Here is my public monthly report.

Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/lts/debian/#sponsors


LTS

- golang-golang-x-net
  - Re-evaluate with past and present Front-Desk
  - Drop from work queue for now
    https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/29db0f849042f2be62d7062e02cb082b6339b060
    https://lists.debian.org/debian-lts/2025/08/msg00005.html

- Stable update tasks
  - Clean-up obsolete tasks
    https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/169
    https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/185
  - Ping freerdp2 for upcoming 12.12
    https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/187

- Tracker code
  - lts-cve-triage
    - add generic triage annotation support
    - clarify new triage reports
    - fix point-update parsing to handle stable->oldstable switches
    - add documentation
    - fix CVEs sorting
  - Miscellaneous clean-ups in old code
  - Ping 2 finished MRs from last month's Sprint (with coordinator's blessing)
    https://salsa.debian.org/security-tracker-team/security-tracker/-/merge_requests/226#note_639331
    https://salsa.debian.org/security-tracker-team/security-tracker/-/merge_requests/227#note_639332


ELTS

- gnome-shell
  - Reproduce CVE-2024-36472 on buster (requires a network with captive portal)
  - Provide testing environment for Emilio's proposed fix, with documentation

- dns-root-data
  - DNSSEC trust anchors update
  - Improve testing (see LTS Documentation below)
  - ELA-1500-1
    https://www.freexian.com/lts/extended/updates/ela-1500-1-dns-root-data/

- Clean-up old (jessie) issues
  https://gitlab.com/freexian/services/deblts-team/extended-lts/-/issues/192#note_2665124538
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1078445#20
  https://gitlab.com/freexian/services/deblts-team/extended-lts/-/issues/165
  https://gitlab.com/freexian/services/deblts-team/extended-lts/-/issues/148
  https://gitlab.com/freexian/services/deblts-team/extended-lts/-/issues/71

- ELA-1253-1/redis: fix-up CVEs association (single vs. multiple ELAs issue)


Common documentation and tooling

- LTS Documentation
  - Captive Portal - HOWTO quickly create a captive portal environment
    https://lts-team.pages.debian.net/wiki/TestSuites/captive-portal.html
  - TestSuites: grub2: link debusine signing technical overview
    https://lts-team.pages.debian.net/wiki/TestSuites/grub2.html
  - TestSuites: dns-root-data: more tests, for buster&stretch, and with unbound
    https://lts-team.pages.debian.net/wiki/TestSuites/dns-root-data.html
  - ARM VM HOWTO: virtualization conclusion: unsuitable for an ARM testbed
    Look for most suitable Raspberry PI for an easy/cheap hardware approach
    https://lts-team.pages.debian.net/howtos/arm-vm.html

- debusine
  - UI: don't capture Alt+left/right (history back/forward) when selecting tabs 
    https://salsa.debian.org/freexian-team/debusine/-/issues/1016
  - Report issue with autopkgtest and overly trimmed-down testbed
    https://salsa.debian.org/freexian-team/debusine/-/issues/1015

- Internal documentation
  - ELTS front-desk: check for unsupported packages in work queue
  - ELTS upload: clarify debusine upload; update website fields; formatting

- Internal infrastructure
  - Reproduce dcut issue following de-activation of direct upload method
  - Recap pending issues with ELTS Tracker JSON export with coordinator

-- 
Sylvain Beucler
Debian LTS Team