Free software activity in August 2026
LLM GR, OpenSSH and PuTTY updates, and the start of Python 3.15 packaging work.
LLM GR, OpenSSH and PuTTY updates, and the start of Python 3.15 packaging work.
In an option review I did in 2024, shortly after the xz-utils backdoor, I explained that having GSS-API authentication and key exchange support in the main OpenSSH packages is problematic. The key exchange patch is large and intrusive. Furthermore, even linking to the necessary libraries is not without risk …
More preparations for OpenSSH GSS-API split; the usual round of Python packaging work.
Debian work as we reached the hard freeze for trixie.
OpenSSH 10.0 (and a request for help), dput-ng, and more.
As of 2022-02-16, Launchpad supports a couple of features on its SSH
endpoints (git.launchpad.net, bazaar.launchpad.net, ppa.launchpad.net,
and upload.ubuntu.com) that it previously didn’t: Ed25519 public
keys (a well-regarded format,
supported by OpenSSH since 6.5 in 2014) and signatures with existing RSA …
A while back there was a thread on one of our company mailing lists about SSH quoting, and I posted a long answer to it. Since then a few people have asked me questions that caused me to reach for it, so I thought it might be helpful if I …
Launchpad operates a few SSH endpoints: bazaar.launchpad.net and
git.launchpad.net for code hosting, and upload.ubuntu.com and
ppa.launchpad.net for uploading packages. None of these are
straightforward OpenSSH servers, because they don’t give ordinary shell
access and they authenticate against users’ SSH keys recorded …
OpenSSH 6.0p1 was released a little while back; this weekend I belatedly got round to uploading packages of it to Debian unstable and Ubuntu quantal.
I was a bit delayed by needing to put together an improvement to privsep sandbox selection that particularly matters in the context of distributions …
For various reasons, I chose to leave Ubuntu 10.04 LTS using OpenSSH 5.3p1. The new features in 5.4p1 such as certificate authentication, the new smartcard handling, netcat mode, and tab-completion in sftp are great, but unfortunately it was available just a little bit too late for me …