September was the fifth month I contributed to Debian LTS under the
Freexian umbrella. In total I spent eight hours working on:
glibc: I fixed four security issues resulting in DLA-316-1
mostly by backporting fixes from current Git. This involved some
issues that didn't have a CVE assigned yet. Salvatore gave a nice
summary on how to handle these.
nss: The backport of the fixes for CVE-2015-2721 and
CVE-2015-2730 resulted in DLA-315-1.
Besides that I did CVE triaging of 9 CVEs to check if and how they
affect oldoldstable security as part of my LTS front desk work.
Other Debian work
I finally sent out the summary of the 8th Debian Groupware Meeting
we had in the Linuxhotel earlier this year and gave a
short talk about Debian at the Zarafa Tour in the Netherlands.