Debian LTS and ELTS - August 2026

[Sylvain Beucler <beuc@beuc.net>]

Here is my public monthly report.

Thanks to our sponsors for making this possible, and to Freexian for
handling the offering.
https://www.freexian.com/lts/debian/#sponsors


LTS

- 7zip/p7zip
  - Review 7zip maintainer's proposed update: upgrade v25->v26 (2 CVEs)
    DLA-4718-1 for 7zip
    https://lists.debian.org/debian-lts-announce/2026/08/msg00009.html
  - Apply the same changes for p7zip
    DLA-4719-1 for p7zip
    https://lists.debian.org/debian-lts-announce/2026/08/msg00010.html


ELTS

- p7zip
  - Align buster and stretch with latest LTS updates (10 CVEs)
    ELA-1794-1
    https://www.freexian.com/lts/extended/updates/ela-1794-1-p7zip/


Common documentation and tooling

- Tooling

  - security-tracker
    https://salsa.debian.org/security-tracker-team/security-tracker/
    - Continue work on addressing performance issues, related to the
      size of 'data/CVE/list', which passed a critical size of 50MB.
    - Design and implement 2 scripts to split and merge
      'data/CVE/list', by year, then by volumes with max entries,
      which Git handles much more efficiently, while respecting the
      security team workflow.
    - Optimize scripts down to ~0.4s per run.
    - Identify and clean-up mistaken large file from Git history.
    - Test rewriting the full Git history with varying parameters.
      https://salsa.debian.org/beuc/sc-split-v1.1
      https://salsa.debian.org/beuc/sc-split-v2-30k
      https://salsa.debian.org/beuc/sc-split-v2-10k
    - Test helmut's Git repacking (which has orthogonal approach).
      https://salsa.debian.org/salsa/support/-/work_items/602
    - Reports/exchanges with helmut and security team.

- Public documentation

  - Development: update deb11 -> deb12
    https://lts-team.pages.debian.net/wiki/Development.html
  - TestSuites: alias 7zip to p7zip
    https://lts-team.pages.debian.net/wiki/TestSuites/p7zip.html
  - ELTS repository now password-restricted: review
    https://salsa.debian.org/lts-team/lts-team.pages.debian.net/-/merge_requests/35

- Team

  - autopkgtest-virt-qemu issue: follow-up on paride's investigation
    https://lists.debian.org/debian-lts/2026/08/msg00011.html

  - Team meeting (Jitsi)
    https://lists.debian.org/debian-lts/2026/08/msg00051.html


-- 
Sylvain Beucler
Debian LTS Team