LTS report 2020-12-01 to 2020-12-31

This time period I used 10 hours.

Stretch Package Support

For the project Stretch Package Support, I used 10 hours in the following tasks:

• golang-github-dgrijalva-jwt-go package
• golang-go.crypto package
• golang-golang-x-net-dev package

golang-github-dgrijalva-jwt-go package

• Attempt to patch, but find that there is no vulnerable code present.
• Send email to debian-lts.
• Isolate first version vulnerable code was present.
• Send email to debian-lts.
• Isolate first version vulnerable code was present.
• Send email to debian-lts.

golang-go.crypto package

• rclone
  • Reserved DLA-2454-1.
  • Send DLA-2454-1 to mailing list.
  • Add DLA-2454-1 to website.
• packer
  • Reserved DLA-2455-1.
  • Send DLA-2455-1 to mailing list.
  • Add DLA-2455-1 to website.

golang-golang-x-net-dev package

• Backport patch for CVE-2019-9512 and CVE-2019-9514.
• Claim package.
• Send email to debian-lts.
• Reserved DLA-2485-1.
• Send DLA-2485-1 to mailing list.
• Add DLA-2485-1 to website.