Debian LTS and ELTS report: April 2025
Hello everyone,
Here’s my monthly report for the work I’ve done for Debian LTS
and ELTS in April 2025.
Thanks to Freexian and sponsors for making this possible:
https://www.freexian.com/lts/debian/#sponsors
LTS
===
libnet-easytcp-perl
I have uploaded an update for Net::EasyTCP Perl module to address
the fact it relied on an insecure random number generator.
libbssolv-perl
A small but important update to the BSSolv Perl module narrowly missed
the bullseye release, but prevented Open Build Service running on bullseye
from working correctly with some Debian packages.
I have uploaded this non-security fix to bullseye.
This upload was not sponsored by Freexian.
golang-github-gorilla-csrf
I have uploaded the fix for this Go package and several other Go packages
that embedded its code in the binaries. I plan to upload this to buster as
well in May (if relevant), and potentially in bookworm.
mbedtls
I continued my work on an update to mbedtls. I intend to upload this update
fixing a bunch of CVEs once I get it reviewed, and then do a follow-up upload
with more fixes if I manage to backport them.
ELTS
====
I haven’t done anything for ELTS this month, but in May I will focus on ELTS.
--
Cheers,
Andrej
Reply to: