LTS report July 2024
====================

1. July 2024 marked the beginning of a transition period while the next LTS
   release Debian 11 "Bullseye" is still officially supported by Debian's security
   team.

2. I have been investigating newly reported CVE for tomcat9 and tomcat10. Due
   to the intrusive changes to HTTP/2 related code I have been contemplating on
   upgrading the Tomcat server to a newer upstream release but have not made a
   decision yet.

3. I have been working on a new upstream release for ffmpeg in bookworm and
   bullseye. While we are able to upgrade to a supported upstream release in
   bookworm, we will have to backport security patches to bullseye.