Debian LTS and ELTS report for October 2025 (charles)
Hi,
I've worked during October 2025 on the below listed packages, for
Freexian LTS/ELTS [1].
Many thanks to Freexian and sponsors [2] for providing this opportunity!
LTS
===
- Exchanged some mail about varnish's CVE-2025-8671 fix for trixie, the
maintainer will upload the fix.
- Worked on gdk-pixbuf's CVE-2025-7345.
(https://security-tracker.debian.org/tracker/CVE-2025-7345)
- Published DLA-4344-1 for gdk-pixbuf/bullseye to fix CVE-2025-7345.
(https://lists.debian.org/debian-lts-announce/2025/10/msg00024.html)
ELTS
====
- Worked on gdk-pixbuf's CVE-2025-7345/buster,stretch.
- Further testing is required before releasing the fixes.
Tooling, Documentation and Misc
================================
- Attended (E)LTS meeting partially, I was only able to join for the
second half of it.
- Attended (E)LTS meeting to discuss CVE scoring.
- Sent a patch to disable armhf and arm64 jobs while runners are MIA so
salsa-ci doesn't fail for LTS and ELTS pipelines.
(https://salsa.debian.org/lts-team/pipeline/-/merge_requests/31)
- Worked on CVE-2025-7345/gdk-pixbuf for bookworm and sent a patch to fix it.
(https://salsa.debian.org/gnome-team/gdk-pixbuf/-/merge_requests/6)
- Sent a patch to add salsa-ci for gdk-pixbuf in unstable.
(https://salsa.debian.org/gnome-team/gdk-pixbuf/-/merge_requests/5)
- Reported some bugs to debusine while working on gdk-pixbuf.
(https://salsa.debian.org/freexian-team/debusine/-/issues/1110)
(https://salsa.debian.org/freexian-team/debusine/-/issues/1121)
- Added incus documetation on lts-team.pages.debian.net.
(https://salsa.debian.org/lts-team/lts-team.pages.debian.net/-/commit/b1ef2f2b85c4bade46f58d96551e7f5c088e911f)
- Reviewed changes in the development pages on
lts-team.pages.debian.net.
(https://salsa.debian.org/lts-team/lts-team.pages.debian.net/-/merge_requests/24)
- Explored and documented how to create incus ELTS images. Published a
how-to create buster-elts container image on my blog and I am working
to publish how-to create VM images at the moment (to be published soon
and added to lts-team.pages.debian.net).
(https://www.charlz.net/2025-10-09-buster-incus-image/)
Best regards,
Charles
[1] https://www.freexian.com/lts/
[2] https://www.freexian.com/lts/debian/#sponsors
Reply to: