Like each month, here comes a report about
the work of paid contributors
to Debian LTS.

Individual reports

In October, 214.50 work hours have been dispatched among 15 paid contributors. Their reports are available:

• Abhijith PA did 8.0h (out of 14h assigned) and gave the remaining 6h back to the pool.
• Adrian Bunk didn’t get any hours assigned as he had been carrying 26h from September, of which he gave 8h back, so thus carrying over 18h to November.
• Ben Hutchings did 22.25h (out of 22.75h assigned), thus carrying over 0.5h to November.
• Brian May did 10h (out of 10h assigned).
• Chris Lamb did 18h (out of 18h assigned).
• Emilio Pozuelo Monfort did 46.25h (out of 21.75h assigned at the beginning of the month and 24.5h assigned at the end of the month).
• Hugo Lefeuvre did 46.5h (out of 22.75h assigned and 23.75h from September).
• Jonas Meurer didn’t get any hours assigned and gave back the 14.5h he was carrying from September as he did nothing.
• Markus Koschany did 22.75h (out of 22.75h assigned).
• Mike Gabriel did 11.75h (out of 10h assigned and 1.75h from September).
• Ola Lundqvist did 8.5h (out of 8h assigned and 14h from September), thus carrying over 13.5h to November.
• Roberto C. Sánchez did 8h (out of 8h assigned).
• Sylvain Beucler did 22.75h (out of 22.75h assigned).
• Thorsten Alteholz did 22.75h (out of 22.75h assigned).
• Utkarsh Gupta did 10.0h (out of 10h assigned).

Evolution of the situation

In October Emilio spent many hours bringing firefox-esr 68 to jessie and stretch, thus expanding the impact from Debian LTS to stable security support. For jessie firefox-esr needed these packages to be backported: llvm-toolchain, gcc-mozilla, cmake-mozilla, nasm-mozilla, nodejs-mozilla, cargo, rustc and rust-cbindgen.
October was also the month were we saw the first paid contributions from Utkarsh Gupta, who was a trainee in September.

Starting in November we also have a new trainee, Dylan Aïssi. Welcome to the team, Dylan!

We currently have 59 LTS sponsors sponsoring 212h per month. Still, as always we are welcoming new LTS sponsors!

The security tracker currently lists 35 packages with a known CVE and the dla-needed.txt file has 35 packages needing an update.

Thanks to our sponsors

New sponsors are in bold.

• Platinum sponsors:
• TOSHIBA (for 49 months)
• GitHub (for 40 months)
• Civil Infrastructure Platform (CIP) (for 17 months)
• Gold sponsors:
• Blablacar (for 64 months)
• Roche Diagnostics International AG (for 60 months)
• Linode (for 54 months)
• Babiel GmbH (for 44 months)
• Plat’Home (for 43 months)
• Silver sponsors:
• The Positive Internet Company (for 66 months)
• Domeneshop AS (for 65 months)
• Nantes Métropole (for 59 months)
• Dalenys (for 55 months)
• Université Jean Monnet de St Etienne (for 51 months)
• Univention GmbH (for 50 months)
• Ribbon Communications, Inc. (for 44 months)
• maxcluster GmbH (for 38 months)
• Exonet B.V. (for 34 months)
• Leibniz Rechenzentrum (for 28 months)
• CINECA (for 18 months)
• Ministère de l’Europe et des Affaires Étrangères (for 12 months)
• Cloudways Ltd
• Bronze sponsors:
• Evolix (for 65 months)
• Seznam.cz, a.s. (for 65 months)
• MyTux (for 64 months)
• Intevation GmbH (for 62 months)
• Linuxhotel GmbH (for 62 months)
• Daevel SARL (for 61 months)
• Bitfolk LTD (for 60 months)
• Megaspace Internet Services GmbH (for 60 months)
• Greenbone Networks GmbH (for 59 months)
• NUMLOG (for 59 months)
• WinGo AG (for 58 months)
• Ecole Centrale de Nantes – LHEEA (for 54 months)
• Sig-I/O (for 52 months)
• Entr’ouvert (for 49 months)
• Adfinis SyGroup AG (for 47 months)
• GNI MEDIA (for 41 months)
• Laboratoire LEGI – UMR 5519 / CNRS (for 41 months)
• Tesorion (for 41 months)
• Bearstech (for 33 months)
• LiHAS (for 33 months)
• People Doc (for 29 months)
• Catalyst IT Ltd (for 27 months)
• Supagro (for 23 months)
• Demarcq SAS (for 21 months)
• TrapX Security (for 18 months)
• Université Grenoble Alpes (for 7 months)

Like each month, here comes a report about
the work of paid contributors
to Debian LTS.

Individual reports

In September, 212.75 work hours have been dispatched among 12 paid contributors. Their reports are available:

• Adrian Bunk did nothing (and got no hours assigned), but has been carrying 26h from August to October.
• Ben Hutchings did 20h (out of 20h assigned).
• Brian May did 10h (out of 10h assigned).
• Chris Lamb did 18h (out of 18h assigned).
• Emilio Pozuelo Monfort did 30h (out of 23.75h assigned and 5.25h from August), thus anticipating 1h from October.
• Hugo Lefeuvre did nothing (out of 23.75h assigned), thus is carrying over 23.75h for October.
• Jonas Meurer did 5h (out of 10h assigned and 9.5h from August), thus carrying over 14.5h to October.
• Markus Koschany did 23.75h (out of 23.75h assigned).
• Mike Gabriel did 11h (out of 12h assigned + 0.75h remaining), thus carrying over 1.75h to October.
• Ola Lundqvist did 2h (out of 8h assigned and 8h from August), thus carrying over 14h to October.
• Roberto C. Sánchez did 16h (out of 16h assigned).
• Sylvain Beucler did 23.75h (out of 23.75h assigned).
• Thorsten Alteholz did 23.75h (out of 23.75h assigned).

Evolution of the situation

September was more like a regular month again, though two contributors were not able to dedicate any time to LTS work.

For October we are welcoming Utkarsh Gupta as a new paid contributor. Welcome to the team, Utkarsh!

This month, we’re glad to announce that Cloudways is joining us as a new silver level sponsor ! With the reduced involvment of another long term sponsor, we are still at the same funding level (roughly 216 hours sponsored by month).

The security tracker currently lists 32 packages with a known CVE and the dla-needed.txt file has 37 packages needing an update.

Thanks to our sponsors

New sponsors are in bold.

• Platinum sponsors:
• TOSHIBA (for 48 months)
• GitHub (for 39 months)
• Civil Infrastructure Platform (CIP) (for 16 months)
• Gold sponsors:
• Blablacar (for 63 months)
• Roche Diagnostics International AG (for 59 months)
• Linode (for 53 months)
• Babiel GmbH (for 43 months)
• Plat’Home (for 42 months)
• Silver sponsors:
• The Positive Internet Company (for 65 months)
• Domeneshop AS (for 64 months)
• Nantes Métropole (for 58 months)
• Dalenys (for 54 months)
• Université Jean Monnet de St Etienne (for 50 months)
• Univention GmbH (for 49 months)
• Ribbon Communications, Inc. (for 43 months)
• maxcluster GmbH (for 37 months)
• Exonet B.V. (for 33 months)
• Leibniz Rechenzentrum (for 27 months)
• Vente-privee.com (for 24 months)
• CINECA (for 17 months)
• Ministère de l’Europe et des Affaires Étrangères (for 11 months)
• Cloudways Ltd
• Bronze sponsors:
• Evolix (for 64 months)
• Seznam.cz, a.s. (for 64 months)
• MyTux (for 63 months)
• Intevation GmbH (for 61 months)
• Linuxhotel GmbH (for 61 months)
• Daevel SARL (for 60 months)
• Bitfolk LTD (for 59 months)
• Greenbone Networks GmbH (for 58 months)
• Megaspace Internet Services GmbH (for 58 months)
• NUMLOG (for 58 months)
• WinGo AG (for 57 months)
• Ecole Centrale de Nantes – LHEEA (for 53 months)
• Sig-I/O (for 51 months)
• Entr’ouvert (for 48 months)
• Adfinis SyGroup AG (for 46 months)
• GNI MEDIA (for 40 months)
• Laboratoire LEGI – UMR 5519 / CNRS (for 40 months)
• Tesorion (for 40 months)
• Bearstech (for 32 months)
• LiHAS (for 32 months)
• People Doc (for 28 months)
• Catalyst IT Ltd (for 26 months)
• Supagro (for 22 months)
• Demarcq SAS (for 20 months)
• TrapX Security (for 17 months)
• Université Grenoble Alpes (for 6 months)

Like each month, here comes a report about the work of paid contributors to Debian LTS.

Individual reports

In August, 212.5 work hours have been dispatched among 13 paid contributors. Their reports are available:

• Adrian Bunk got 8h assigned (plus 18 extra hours from July), but did nothing, thus he is carrying over 26h to September.
• Ben Hutchings did 20 hours (out of 20 hours allocated).
• Brian May did 10 hours (out of 10 hours allocated).
• Chris Lamb did 18 hours (out of 18 hours allocated).
• Emilio Pozuelo Monfort did 31 hours (out of 21.75h assigned plus 14.5 extra hours from July), thus he is carrying over 5.25h to September).
• Hugo Lefeuvre did 30.5 hours (out of 21.75 hours allocated, plus 8.75 extra hours from July).
• Jonas Meurer did 0.5 hours (out of 10, thus carrying 9.5h to September).
• Markus Koschany did 21.75 hours (out of 21.75 hours allocated).
• Mike Gabriel did 24 hours (out of 21.75 hours allocated plus 3 extra hours from July, thus keeping 0.75 extra hours for September).
• Ola Lundqvist got 8h assigned (plus 8 extra hours from August), but did nothing and gave back 8h, thus he is carrying over 8h to September.
• Roberto C. Sanchez did 8 hours (out of 8 hours allocated).
• Sylvain Beucler did 21.75 hours (out of 21.75 hours allocated).
• Thorsten Alteholz did 21.75 hours (out of 21.75 hours allocated).

Evolution of the situation

August was more or less a normal month, a bit still affected by summer in the area where most contributors live: so one contributor is still taking a break (thus we only had 13, not 14), two contributors were distracted by summer events and another one is still in training.

It’s been a while that we haven’t welcomed a new LTS sponsors. Nothing worrisome at this point as few sponsors are stopping, but after 5 years, some have moved on so it would be nice to keep finding new ones as well. We are still at 215 hours sponsored by month.

The security tracker currently lists 42 packages with a known CVE and the dla-needed.txt file has 39 packages needing an update.

Thanks to our sponsors

New sponsors are in bold.

• Platinum sponsors:
• TOSHIBA (for 48 months)
• GitHub (for 38 months)
• Civil Infrastructure Platform (CIP) (for 15 months)
• Gold sponsors:
• The Positive Internet Company (for 64 months)
• Blablacar (for 63 months)
• Roche Diagnostics International AG (for 58 months)
• Linode (for 52 months)
• Babiel GmbH (for 42 months)
• Plat’Home (for 41 months)
• Silver sponsors:
• Domeneshop AS (for 63 months)
• Nantes Métropole (for 57 months)
• Dalenys (for 53 months)
• Univention GmbH (for 49 months)
• Université Jean Monnet de St Etienne (for 49 months)
• Ribbon Communications, Inc. (for 42 months)
• maxcluster GmbH (for 36 months)
• Exonet B.V. (for 32 months)
• Leibniz Rechenzentrum (for 26 months)
• Vente-privee.com (for 23 months)
• CINECA (for 16 months)
• Ministère de l’Europe et des Affaires Étrangères (for 10 months)
• Bronze sponsors:
• Seznam.cz, a.s. (for 64 months)
• Evolix (for 63 months)
• MyTux (for 63 months)
• Intevation GmbH (for 60 months)
• Linuxhotel GmbH (for 60 months)
• Daevel SARL (for 59 months)
• Bitfolk LTD (for 58 months)
• Megaspace Internet Services GmbH (for 58 months)
• Greenbone Networks GmbH (for 57 months)
• NUMLOG (for 57 months)
• WinGo AG (for 56 months)
• Ecole Centrale de Nantes – LHEEA (for 52 months)
• Sig-I/O (for 50 months)
• Entr’ouvert (for 47 months)
• Adfinis SyGroup AG (for 45 months)
• GNI MEDIA (for 39 months)
• Laboratoire LEGI – UMR 5519 / CNRS (for 39 months)
• Tesorion (for 39 months)
• Bearstech (for 31 months)
• LiHAS (for 31 months)
• People Doc (for 27 months)
• Catalyst IT Ltd (for 25 months)
• Supagro (for 21 months)
• Demarcq SAS (for 19 months)
• TrapX Security (for 16 months)
• NCC Group (for 13 months)
• Université Grenoble Alpes (for 5 months)

With the agreement of the Debian LTS contributors funded by Freexian, earlier this year I decided to spend some Freexian money on marketing: we sponsored DebConf 19 as a bronze sponsor and we prepared some stickers and flyers to give out during the event.

The stickers only promote the Debian LTS project with the semi-official logo we have been using and a link to the wiki page. You can see them on the back of a laptop in the picture below. As you can see, we have made two variants with different background colors:

The flyers and the video are meant to introduce the Debian LTS project and to convince companies to sponsor the Debian LTS project through the Freexian offer. Those are short documents and they can’t explain the precise relationship between Debian LTS and Freexian. We try to show that Freexian is just an intermediary between contributors and companies, but some persons will still have the feeling that a commercial entity is organizing Debian LTS.

Check out the video on YouTube:

The inside of the flyer looks like this:

Note that due to some delivery issues, we have left-over flyers and stickers. If you want some to give out during a free software event, feel free to reach out to me.