Debian LTS report for February 2020

Hi,

February was my 2nd month as a Debian LTS paid contributor, a Freexian’s initiative. I was assigned 4 hours (+ 1,5 hours from January) and I spent all of them for the following:

rake:

• Fixed CVE-2020-8130, tested, uploaded and released DLA-2120-1.

libimobiledevice:

• Fixed CVE-2016-5104, tested, uploaded and released DLA-2121-1.

libusbmuxd:

• Fixed CVE-2016-5104, tested, uploaded and released DLA-2122-1.

libmtp:

• Adapt patch from DLA-1029-1 (Wheezy) to fix CVE-2017-9831 and CVE-2017-9832 in Jessie. Still need to check whether some other parts need to be backported.

– Dylan