About 95% of my Debian contributions this month were sponsored by Freexian.

You can also support my work directly via Liberapay or GitHub Sponsors.

OpenSSH

Now that Ubuntu 26.04 LTS has been released, I’ve been getting back to the GSS-API key exchange package split in our OpenSSH packaging. Once I started testing my draft openssh-gssapi source package, I realized that I needed to make some changes in the main openssh source package first in order to support it. The dependency from openssh-server to openssh-client was awkward, as was the (related) fact that openssh-client contained shared documentation for other OpenSSH binary packages. After some thought, I created a new openssh-common binary package, moved shared documentation and the ssh-keygen program to that, and dropped dependencies on openssh-client which were no longer necessary (fixing #699473 and #1070098 in the process).

This caused a couple of regressions (#1141420 and #1141550) that I had to fix, and more subtly it also caused a number of autopkgtest regressions in other packages because openssh-client is no longer in base images as a result of a dependency from openssh-server. I believe I have fixes for all of these either pending review or merged (one of which I did in August rather than July):

• curl
• diffoscope
• glome
• golang-github-appleboy-easyssh-proxy
• parsyncfp2
• rsync

I upgraded from 10.3p1 to 10.4p1, and in the process contributed a GSS-API option handling fix upstream.

I made openssh-ssh1’s package description more accurately describe the package, thanks to suggestions from Matthias Lang.

Installer team

With support from a Freexian customer, I reviewed, tested, edited, and merged a patch to add VLAN support. I described the details of what I did in a comment.

This has been vaguely on my to-do list since, er, about 2014, so it was very satisfying to get it sorted out.

Python packaging

New upstream versions:

• cryptodatahub (fixing a build failure)
• dep-logic
• django-q
• flufl.lock
• more-itertools
• multipart
• pyasn1 (fixing CVE-2026-59884, CVE-2026-59885, and CVE-2026-59886)
• pytest-rerunfailures
• python-auditwheel
• python-build
• python-certifi
• python-datamodel-code-generator (fixing a build failure, and an incompatibility with pydantic 2.13 that I reported upstream)
• python-django-parler
• python-httplib2
• python-pgbouncer
• python-time-machine
• python-treq
• python-typing-extensions
• python-wheezy.template
• storm
• ubelt
• webpy
• zope.testing

Other build/test failures:

• django-q: autopkgtest failure with Python 3.14 (reported upstream)
• httpx: FTBFS: E assert [(‘uvicorn.ac…1.1 200 OK”’)] == [(‘httpx’, 20…1.1 200 OK”’)]
• libntruprime: autopkgtest failures with Python 3.14
• pygments: Handle None object before HTML escaping (fixed build failures in cmd2, gunicorn, python-inline-snapshot, and python-openapi-core)
• python-authlib: some of tests/flask/test_oauth2/rfc9068/ failed
• python-click: autopkgtest regression with pytest 9.1 (contributed upstream)
• python-httplib2: FTBFS: ERROR tests/test_proxy.py - Failed: ‘forked’ not found in markers configuration option
• python-maturin: Please upgrade goblin dependency to 0.10
• python-memray: FTBFS on armhf (segfault)
• python-mne: FTBFS: E pytest.PytestRemovedIn10Warning: Passing a non-Collection iterable to parametrize is deprecated (actually fixed in scikit-learn; contributed upstream)
• python-softlayer: autopkgtest fails with python3-click 8.3.3 (contributed upstream)
• python-urllib3: FAILED test/contrib/test_pyopenssl.py

I fixed some other bugs:

• django-pipeline: Fails to build source after successful build
• more-itertools: Please mark python3-more-itertools with M-A: foreign

I adopted transaction for the Python team.

I attended the Python BoF at DebConf remotely, although a badly-timed fibre outage in the village I live in really didn’t help.

Code reviews

• openssh: sshd-session built without crypt(), breaking UsePAM=no password auth (merged and uploaded)
• openssh: Slovak debconf templates translation (merged and uploaded)
• python-treq: Fails to build source after successful build (merged and uploaded)
• python-better-exceptions: FTBFS: failing tests (sponsored upload for Seyed Mohamad Amin Modaresi)
• yubihsm-connector: patch to make the build reproducible (merged and uploaded)

Other bits and pieces

Dan Poltawski pointed out in a Fediverse post that the project history didn’t list Sruthi as the current DPL. I fixed that, although it doesn’t look as though the fix is in the published version yet.

I upgraded yubihsm-shell to 2.8.0.