My LTS work in May 2018

Organizing the MiniDebConf 2018 in Hamburg definitly took more time than planned, and then some things didnt work out as I had imagined so I could only start working on LTS at the end of May, and then there was this Alioth2Salsa migration too… But at least I managed to get started working on LTS gain \o/

I managed to spend 6.5h working on:

  • reviewing the list of open CVEs against tiff and tiff3 in wheezy
  • prepare tiff 4.0.2-6+debu21, test and upload to wheezy-security, fixing CVE-2017-11613 and CVE-2018-5784.

  • review procps 1:3.3.3-3+deb7u1 by Abhijith PA, spot an error, re-review, quick test and upload to wheeze-security, then re-upload after building with -sa :) This upload fixes CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 and CVE-2018-1126.

  • write and release DLA-1390-1 and DLA-1301 for those two uploads.

I still need to mark CVE-2017-9815 as fixed in wheezy, as the fix for CVE-2017-9403 also fixes this issue.