During the month of June, I worked on the following tasks for LTS:

- CVE triaging / frontdesk

- Updated firefox-esr (DLA-4635-1).

- Coordinated and sent announcements for thunderbird (DLA-4636-1) and
  chromium (DLA-4654-1).

- Prepared grub2 update for bullseye, needed for the shim update.

- Coordinated updates to toolchain packages needed by newer Firefox ESR
  versions (llvm, rustc, etc). Work is still ongoing.

- Various salsa-pipeline (LTS and upstream) reviews.
  - https://salsa.debian.org/lts-team/pipeline/-/merge_requests/39
  - https://salsa.debian.org/salsa-ci-team/pipeline/-/work_items/581

- Proposed a more streamlined process for declaring packages as EOL.
  Currently the process involves filing an issue to discuss it (e.g.
  in the lts-updates-tasks project). Once that is decided, then several
  extra steps are needed:
  - File issue (e.g. bug report) against debian-security-support
  - MR for debian-security-support's master branch
  - MR for debian-security-support's $release branch
  - Release the package.
  By dropping the $release files from the master branch, less
  coordination is needed, and one could also skip the bug report step,
  add a commit to the $release branch directly (with a link to the
  lts-updates-tasks issue). See:
  - https://salsa.debian.org/debian/debian-security-support/-/merge_requests/68
  - https://salsa.debian.org/debian/debian-security-support/-/merge_requests/69
  - https://salsa.debian.org/pochu/security-tracker/-/commit/b9cccc32a15b3986c8982d3875bf1ddb947d067d

- Investigated feasibility of supporting OpenJDK 17 for an extended period.

I also worked on the following tasks for ELTS:

- CVE triaging / frontdesk

- Worked on shim updates for buster to get it signed by both the old
  Microsoft CA from 2011, which was expiring this June, and the new
  Microsoft CA, so we have a smooth transition. Continued preparing
  the bullseye updates as well. The updates have not been released yet
  since bullseye is not ELTS yet. More details at:
  - https://wiki.debian.org/SecureBoot/CAChanges
  - https://github.com/rhboot/shim-review/issues/566