Hello!
I've worked on the packages mentioned below, for Freexian LTS/ELTS [1].
Many thanks to Freexian and our sponsors [2] for providing this
opportunity!
# LTS
## bind9
- Release DLA-4725-1 to fix CVE-2026-3039 CVE-2026-3592 CVE-2026-5946
CVE-2026-5950 CVE-2026-10723 CVE-2026-10822 CVE-2026-11331 CVE-2026-11605
CVE-2026-11622 CVE-2026-11721 CVE-2026-12617 CVE-2026-13204 CVE-2026-13321 in
bullseye and bookworm.
## libssh2:
- Mark CVE-2026-55200, CVE-2026-55199, CVE-2026-66033 and CVE-2026-66035 as not
vulnerable in bullseye
- Patches ready for release. Waiting for trixie-pu being accepted.
## python-httplib2
- Release patch for CVE-2026-59939 for trixie (DSA 6441-1)
- Release DLA 4747-1 to fix CVE-2021-21240 and CVE-2026-59939 in bullseye
- Release DLA 4748-1 to fix CVE-2026-59939 in bookworm
## pyasn1
- Work on CVE-2026-59884, CVE-2026-59885 and, CVE-2026-59886 patches.
- Send trxie-pu #1145581.
- Patches ready for release. Waiting for trixie-pu being accepted.
# ELTS
## libssh2
- Mark CVE-2026-66035, CVE-2026-66034 and, CVE-2026-58050 as not affected for
Buster and Stretch.
- Patches ready for release. Waiting for trixie-pu being accepted.
## pyasn1
- Work on CVE-2026-59884, CVE-2026-59885 and, CVE-2026-59886 patches.
- Pathes ready for release. Waiting for trixie-pu being accepted.
## python-httplib2
- Release ELA_1814-1 to fix CVE-2020-11078 CVE-2021-21240 CVE-2026-59939 for
0.9.2+dfsg-1+deb9u1 (stretch), 0.11.3-2+deb10u1 (buster)
# Meetings
- Attend the monthly LTS team meeting
[1] https://www.freexian.com/lts/
[2] https://www.freexian.com/lts/debian/#sponsors
--
cheers,
Emmanuel Arias
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ eamanu@debian.org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: 13796755BBC72BB8ABE2AEB5 FA9DEC5DE11C63F1
⠈⠳⣄
Attachment:
signature.asc
Description: PGP signature